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INSTRUCTIONS 2511. 8J 20 April 1989 


SAFEGUARDING THE SINGLE INTEGRATED OPERATIONAL PLAN (SIOP) 
Reference: MJCS 75-87. 20 May 1987 

1. Purpose . To supplement the reference and to establish 
procedures for the processing and safeguarding of SIOP information 
within the agencies listed in paragraph 3 below. 

2. Cancellation . JAI 2511.81, 3 October 1983. 

3. Applicability . The procedures of this instruction will be 
followed within the Joint Staff. With the concurrence of the 
Office of the Secretary of Defense; Federal Emergency Management 
Agency (FEMA); the Director, Defense Communications Agency (DCA); 
the Director, Defense Intelligence Agency (DIA); the Director, 
Defense Mapping Agency (DMA); the Director, Defense Nuclear Agency 
(DNA); the Director, National Security Agency (NSA); Director, and 
the Chief, Joint Atomic Information Exchange Group (JAIEG) these 
procedures will also be applicable to personnel under the 
jurisdiction of these agencies. 

4. Policy . Executive Order 12356, 2 April 1982, DOD Directive 
5200.1 and DOD Regulation 5200. 1-R provide instructions for the 
DOD Information Security Program. These documents prescribe 
measures for classification, reproduction, accountability, 
safekeeping, storage, dissemination, and transmission of official 
information and include within their scope the documents which 
constitute the SIOP. This directive and the reference provide 
supplemental guidance and apply specifically to that information 
which is designated as SIOP-Extremely Sensitive Information 
(SIOP-ESI) in the reference. 
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Respons ibi 1 it ies 


a. Each agency listed in paragraph 3 will ensure that the 
provisions of this instruction and the reference are 
implemented and followed. Specifically, each agency will 
assure: 

(1) That each person who is authorized access to SIOP-ESI 
is briefed in accordance with subparagraph 8b(8) of the 
Appendix to the reference and executes a briefing 
certificate prior to being granted access, and executes a 
debriefing certificate after removal from an agency master 
access roster. For Joint Staff personnel, JCS Form 59, 
"Security Agreement," will be used. Other agencies may 
use their own briefing/debriefing forms. 

(2) That an agency master SIOP-ESI access listing is 

maintained in accordance with subparagraph 8b(9) of the 
reference. Two copies of each agency master roster will 
be forwarded monthly to the Joint Staff, Attn: Security 

Division, DIRM. Rosters should arrive npt later than the 
10th day of the month. JAIEG is requested to provide 
access roster data to DNA. DNA is requested to include 
the JAIEG in its master access roster. 

(3) That a notice of travel and duty restrictions is 
forwarded to the person concerned, the appropriate 
personnel, security, and travel offices in accordance with 
paragraph 9 of the Appendix to the reference. Joint Staff 
elements are to use JCS Form 101 (Sample format contained 
at Enclosures A and B) . THIS NOTICE WILL BE FORWARDED AT 
THE TIME OF ASSIGNMENT TO THE BILLET. The personnel 
office will forward the notice to the parent Service 
personnel distribution control point. 

b. Personnel granted permanent or temporary access to 
SIOP-'ESI need no further authorization for access to the 
categories of SIOP-ESI specified; however, holders of SIOP-ESI 
documents must still exercise prudence when releasing SIOP-ESI 
information. 

Information Control Procedures 


a. General. The reference states that those portions of the 
SIOP not designated as "SIOP-ESI" are not considered to 
require any special control procedures; thus, normal 
procedures applicable to the degree of classification assigned 
are to be followed for handling those SIOP documents not 
considered "SIOP-ESI." This- instruction, accordingly, 
establishes procedures and controls that are applicable only 
to "SIOP-ESI," as defined in the reference. 
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b. Document Control . The following procedures are hereby 
established for control of documents marked ‘SIOP-ESI.” 
Internal procedures within each applicable agency and Joint 
Staff directorate shall provide for a "continuous receipt" 
system for all SIOP-ESI documents. 

(1) Tapes, reproduced in accordance with subparagraph 
6b(2) of the Appendix to the reference, shall be 
controlled as directed by Nuclear Warfare Status Branch, 
J-3 , Joint Staff, in collaboration with recipient. 

(2) Messages shall normally be destroyed within 6 MONTHS 
from date of receipt. Copies of messages that are needed 
for longer periods of time shall be placed in the normal 
document control system. 

(3) Working papers shall be controlled by the originator 

in accordance with the procedures for messages specified 
in subparagraph 6b(2) above. ' 

(4) SIOP-ESI documents shall be returned to the. control 
point established in accordance with the foregoing when no 
longer required. 

(5) All SIOP-ESI documents (including working papers and 
messages) to be destroyed shall be listed on certificates 
of destruction forms and destroyed in accordance with 
security regulations and paragraph 18 of the Appendix to 
the reference. Within the Joint Staff, the forms to be 
used are those prescribed in JAI 2511.3 series. Agencies 
outside the Joint Staff may continue to use their own 
administrative procedures for this purpose. Handwritten 
notes and rough drafts should be segregated from other 
classified trash and disposed of in accordance with this 
paragraph in a manner which allows access only by 
authorized personnel. 

c . Marking, Distribution, Transmission, and Transportation of 
Data . The procedures set forth in paragraphs 5, 6, 13, and 14 
of the Appendix to the reference are to be followed in all 
instances . 

d. Reproduction of SIOP-ESI . Copies of SIOP-ESI material 
will be controlled in accordance with the procedures outlined 
above and paragraph 16 of the Appendix to the reference. 
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Personnel Access Control . 


a. General ♦ The Joint Chiefs of Staff consider that 

distribution of and access to SIOP-ESI must be strictly 
limited and based on vigorously justified operational 
requirements or need-to-know. This is especially true for the 
SIOP decision and execution process. Supervisors should use 
mechanical means to preclude access and reduce the number of 
SIOP-ESI billets whenever possible. Examples are: collect 

and lock SIOP-ESI in one safe versus having SIOP-ESI documents 
stored in several locations, hold SIOP-ESI discussions only in 
conference rooms where the audience can be controlled, etc. 

b. Delegation of Authority . In accordance with subparagraph 
8e of the Appendix to the reference, the Director, Joint Staff 
has delegated authority to the Director for Operations (J-3) 
to approve/disapprove requests to establish permanent access 
billets and grant temporary access for military and civilian 
personnel of the agencies listed in paragraph 3 above. 

c. Permanent Access . Requests to establish permanent SIOP 
ESI access billets as outlined in subparagraph 8b(2)(a) of the 
Appendix to the reference should be submitted to the Director 
for Operations (J-3). Requests must contain the categories of 
SIOP-ESI for which access is required and a rigorous 
justification which includes the frequency of anticipated 
access, the intended use of the information obtained, and a 
discussion which explains why the number of billets/persons , 
if any, previously granted access is inadequate. 

d. Temporary Access . Requests for temporary access to 
SIOP-ESI as outlined in subparagraph 8b(2)(b) of the Appendix 
to the reference should be submitted to the Director for 
Operations (J-3). Requests must contain the categories of 
SIOP-ESI for which access is requested and a detailed 
discussion of why and for how long access is required. 
Requests must also include the name(s) , SSN, and clearance 
data of personnel for which access is requested. 

e. Contractor Access . Civilian personnel not subject to the 
provisions of the Office of Personnel Management (0PM) or 
Department of Defense personnel policies (e.g. contractor 
personnel) shall not be granted PERMANENT ACCESS to SIOP-ESI 
information. Personnel in this category will be authorized 
TEMPORARY ACCESS ONLY. Requests for contractor access should 
be submitted to the Director for Operations (J-3). Requests 
must contain the name of the contractor, name(s), SSN, 
categories of SIOP-ESI for which access is required, and a 
detailed discussion of why and for how long access will be 
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required. Requests for initial temporary access will be 
approved by the Director, Joint Staff. Requests to extend the 
initial period of temporary access may be approved by the 
Director for Operations or his designee. 

f. Waiver of SBI Requirement . In accordance with 
subparagraphs 8b(5)(b) and 8c of the Appendix to the 
reference, the Deputy Director, National Military Command 
System is authorized to waive the SBI requirement for 
personnel assigned to the organizations listed in paragraph 3 
above. Requests for waivers should be submitted to the 
Director for Operations (J-3), Attention; Strategic 
Operations Division. The request for waiver should contain a 
detailed discussion of why the waiver is necessary as well as 
a certification that the individual qualifies for a waiver as 
outlined in subparagraph 8b(5)(b) of the Appendix to the 
reference. 

g. Access for Personnel Designated to Relocate to the 
National Military Command Center (NMCC), Alternate National 
Military Command Center (ANMCC), and National Emergency 
Airborne Command Post (NEACP) . Access for personnel assigned 
to relocate under EMERGENCY relocation procedures will be 
granted as follows: 

(1) Relocation rosters shall be submitted to the NMCC and 
to the carious alternates via the Security Division, DIRM, 
Joint Staff which will annotate and sign such rosters as 
follows : 

(a) “The personnel listed above meet the criteria 
for access to SIOP-ESI data as prescribed in MJCS 
75-87 and are to be automatically added to their 
Master Agency SIOP-ESI Access Roster when EMERGENCY 
relocation is directed." 

(b) Any person on such lists who do not meet the 
criteria for access shall be listed as “Exceptions." 

(2) Due to the nature and purpose of the EMERGENCY 
relocation roster, it is more than probable that a 
briefing certificate will not be completed on individuals 
when EMERGENCY relocation is directed. Therefore, a 
debriefing certificate will be administered by the 
appropriate directorate or agency security organization at 
such time as the EMERGENCY no longer exists and the 
relocatees have returned to the parent organizations. 
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8 . Access for Personnel Designated to P articipate in EXERCISES 

a SIOP-ESI access is not normally required for personnel 
designated to participate in EXERCISES. If it is determined 
that exercise participants, including Planning Group member 
and Evaluation Group members, will be required to have access 
to SIOP-ESI, requests for such access will be processed in 
accordance with the procedures prescribed in paragraph 7d 
above . 


b. The procedures of this section will not apply to personnel 
who have been granted permanent access to SIOP-ESI by reason 
of occupying a permanent SIOP-ESI billet as defined in 
subparagraph 7c above unless the categories of access required 
on a temporary basis will exceed the permanent authorization. 

c. Exercise temporary access rosters shall be submitted to 
the NMCC and to the various alternates via the Security 
Division, DIRM, Joint Staff. Personnel listed on such 
rosters must be briefed and debriefed as outlined in 
subparagraph 8b(8> of the Appendix to the reference. 

9, Requests for SIOP documents shall be handled in accordance 

with paragraph 6 of the Appendix to the reference. 

10. vi sits Recaiirinq Access to SIOP Information, STOP Brief ings, _ 

and Visits to Joint Strategic Target P lanning Staff (JSTPSl 

a Visits involving SIOP-ESI information and requests for 
SIOP briefings will be handled in accordance with paragraphs 
10 and 11, respectively, of the Appendix to the reference. 

b Visits to the JSTPS will be approved by the Chairman, 

Joint Chiefs of Staff, or other Joint Staff authority, as 
appropriate, to minimize the interference with SIOP 
development and unwarranted dissemination of SIOP 
information. All requests for visits to JSTPS, except those 
from individuals directly involved in SIOP development, 
support, and implement at ion—see table below, will be 
forwarded to the Director for Operations, Joint Staff, a 
minimum of seven working days prior to the proposed visit for 
a determination of the proper approval authority. The reason 
for the requests, identity of the visitors, and the 
briefings/discussions requested will be considered in 
determining the approval authority. Approval/disapproval 
authority for visits to JSTPS is as follows; 
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SOURCE OF REQUEST 

APPROVAL/D I SAPPROVAL 
AUTHOR I TYI 

Civilian Personnel from White House, 
Senate or House of Representatives 

CJCS 

Foreign Personnel other than NATO 

JCS 

Foreign Members of NATO 

DJS 

Individuals from the Joint Staff, 
Services, CINCs, DIA, DMA, or DNA 
who are directly involved with SIOP 
development, support, or implementation 

DSTP 

Services, Agencies subject to JAI (See 
paragraph 3), and all others 

J-3 

^JCS or other authorities are consulted 

as* appropriate. 


c. JSTPS will provide the Director for Operations with 
informational copies of any messages or documents which may 
result from approvals/disapprovals processed at JSTPS. 

11. Actions in Case of possible or actual compromise shall be 
handled in accordance with paragraph 15 of the Appendix to the 
reference. 

12. SIOP-ESI Access Categories are defined in Annex A of the 
Appendix to the reference. 


Attachments 

Enclosure A, JCS Form 101 
Enclosure B, Sample Format for Recommendations Pertaining to 
Travel and Duty Restrictions 

SUMMARY OF CHANGES. Administrative update. 



MICHAEL R. DAVENPORT 
Colonel, USAF 
Director, Information 


and Resource Management 



ENCLOSURE A 
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TRAVEL AND DUTY RESTRICTIONS 

Name I Rank/Grade I SSAN 


Subject individual is assigned to permanent SiOP-ESI access billet 

in accordance with MJCS 75-87 

As a result of this access authorization, the individual will have broad or 
detailed knowledge and continuing access to SIOP-ESI information. 
Therefore, he/she is restricted from official of unofficial travel to the coun- 
tries listed in t je Tab to Annex E of MJCS 75-87, while assigned to the Joint 
Staff unless the restriction is waived by the Director for Operations, the 
Joint Staff. 


Subject individual is restricted from travel to and duty assignment in the 

countries listed in the Tab to Annex E of MJCS 75-87 for 

year(s) commencing with the date he/she is detached from the Joint Staff. 
This restriction may be waived by the Director for Operations, the Joint 
Staff. 

Military Secretary/Executive Officer I Signature 


JCS Form 101 
APR 89 


(W) COPY 1 ■ Pers Div. J-1 
(Y| COPY 2 - Security Div. DIRM 
IP) COPY 3 - Travel Sec, Services Div, DIRM 
(Q) COPY 4 - Individual's Copy 


Enclosure A 
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ENCLOSURE B 

SAMPLE FORMAT FOR NOTICE OF TRAVEL AND DUTY RESTRICTIONS 
MEMORANDUM FOR DISTRIBUTION 

Subject: Travel and Duty Restriction Regarding 

(Rank/Grade, Name, Social Secur^ity Number) 


1. is assigned to 

(Rank/grade, name, SSN) 

permanent SIOP-ESI access billet in 

accordance with reference*. 

2. As a result of this access authorization, he/she will have 

broad or detailed knowledge and continuing access to SIOP-ESI 
information. Therefore, he/she is restricted from official and 
unofficial travel to the countries listed in the Tab to Annex E of 
the reference while assigned to unless the 

(Agency) 

restriction is waived by the Director for Operations, Joint Staff. 

3. Furthermore, is restricted from travel 

(Name) 

to and duty in the countries listed in the Tab to Annex E of the 

reference for year(s) commencing with the date he/she 

is detached from This restriction may be waived 

(Agency) 

by the Director for Operations, Joint Staff. 


(Authorized Signature) 


Reference 

* MJCS 75-87, dated 20 May 1987 

Distribution 
J-1, PSD 

DIRM, Security Division 
DIRM, Services Division 
Individual concerned 


Enclosure B 
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SAFEGUARDING THE SINGLE 
INTEGRATED OPERATIONAL PLAN (U) 



THE JOINT CHIEFS OF STAFF 
WASHINGTON, D.C. 20a01 

MJCS 75-87 


pdc £)/V 


CLASSIFIED BY DIRECTOR, J-3 
DECLASSIFY ON OADR 




SEGREf . 

THE JOINT CHIEFS OF STAFF 
WASHING10N. D C 2O3OI-5000 

MJCr. 75-87 
20 M.ny 10 R7 


MEMORANDUM FOR: DISTRIBUTION LIST 

Subject: Safeguarding the Single Integrated Operational Plan 


1. The Appendix contains the policy of the Joint Chiefs of Staff 
with regard to security of the Single Integrated Operational Plan 
(SIOP)/ the basic administrative and handling requirements# and 
the emphasis that must be placed on control of SIOP-Extremely 
Sensitive Information (SIOP-ESI). 


2. This memorandum supersedes SM-313-83# 10 May 1983,^^ 
"Safeguarding the Single Integrated Operational Plan. 

3. Without enclosure# this memorandum is UNCLASSIFIED. 


For the Joint Chiefs of Staff: 


RICHARD A. BURPEE 
Lieutenant General# USAF 
Director for Operations 


Enclosure 
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DISTRIBUTION 


No. of Copies 

^ 13 * 

Secretary of Defense 

Director of Central Intelligence ^ 

Chairman/ Joint Chiefs of Staff ^ 

Chief of Staff, US Army ^ 

. . 4 

Chief of Naval Operations 

Chief of Staff, US Air Force ^ 

Commandant of the Marine Corps ^ 

Commander in Chief, US Space Command ^ 

Commander in Chief, US Atlantic Command ^ 


* Includes c^opies for distribution to the following: 

Assistant to the President for National Security ^ 

Affairs ; , 

Director, White House Military Office 

Director, Federal Emergency Management Agency i 

Director, US Secret Service, Department of the ^ 

Treasury , 

Deputy Under Secretary of Defense for Policy 

Director, Emergency Planning, Office of tne Deputy 

Under Secretary of Defense for Policy. 

Director. Information Security, Office of the Deputy 
Under Secretary of Defense for ' 

Director, Security Plans and Programs, Office of the 
Deputy Under Secretary of Defense for Policy. ........ 

Deputy Assistant Secretary of Defense (Comptroller) ^ 

(Administration) 

Director for Industrial Security Clearance Review, ^ 

General Counsel ^ 

Director, Washington Headquarters Services 



bjo. of Copies 


commander in Chief, US Central Command.. 

US Commander in Chief v Europe 

commander in Chief, Military Airlift Command 

Commander in Chief, US Pacific Command- 

commander in Chief, US Readiness Command 

Commander in Chief, US Southern Command 

Commander in Chief, Strategic Air Command 

Director of Strategic Target Planning 

US Representative to the Military Committee, NATO. 

Director, Defense Communications Agency 

Director. Defense Intelligence Agency 

Director, Defense Investigative Service 

Director, Defense Logistics Agency 

Director, Defense Mapping Agency 

Director, Defense Nuclear Agency 

Director, National Security Agency/Cnief , Central 

Security Service {P-391) 

Director* Joint Staff 

Director for Manpower and Personnel, Joint Staff. 

Director for Operations, Joint Staff 

Director for Logistics, Joint Staff 


2 

2 

2 

9 

.3 

.5 

.5 

.8 

,1 

.4 

.7 

.4 

.2 

.9 

.3 

. .1 
. . L 
. .1 

.13 
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Director for Strategic Plans and Policy, Joint 

Staff * 

Director for Command, Control, and Communications 

Systems# Joint Staff 

us National Military Representative, SHAPE 

commander. Joint Special Operations Command 

Director, Force Structure, Resources, and 

Assessment 

Director for Information and Resource Management, OJCS 

Chief, Alternate National Military Command Center 

Commander, Joint Coordination Center 

Chief , National Emergency Airborne Command Post 

Chief, Joint Atomic Information Exchange Group 

Secretary, Joint Chiefs of Staff 
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appendix 

SAFEGUARDING THE SINGLE INTEGRATED OPERATIONAL PLAN (U) 

L. (U) General 

a. (U) The guidance herein sets forth the policy of the 
Joint Chiefs of Staff with regard to security of the 
Single integrated Operational Plan (SIOP). This directive 
is intended to: 

(1) (U) Emphasize the need for strict observance of 
basic security regulations in safeguarding the SIOP. 

(2) (U) Emphasize that stringent cpntrol must be 
exercised over SIOP-Extreroely Sensitive Information 
(SIOP-ESI), as defined below. 

(3) (U) Provide the basic policy for the identification 
of SIOP-ESI. 

(4) (U) Set forth specific security controls and 
procedures to ensure that distribution of and access to 
SIOP-ESI are authorized with utmost discrimination in 
all cases. 

b. (U) Executive Order 12356, DOD 5200.1 and DOD 5200. 1-R 

provide- instructions for the OOD Information Security 

Program. These documents prescribe measures for 

CLASSIFIED DIRECTOR, J-3 
DECLASSIFY ON OAOR 
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classification, reprodaction, accountability, safekeeping, 
storage, dissemination, and transmission of official 
information and include within their scope the documents 
that constitute the SIOP. This directive is supplemental 
to the preceding directives and applies more specifically 
to SIOP-ESI, as described herein. 

c. (U) The Joint Chiefs of Staff consider the information 
described in subparagraph 3b and paragraph 4 to be an 
extremely high-level enemy intelligence collection target. 
Its disclosure to unauthorized persons could clearly 
result in serious degradation of the effectiveness of the 
SIOP and therefore, should be designated SIOP-ESI. The 
Joint Chiefs of Staff consider that distribution of and 
access to SIOP-ESI must be strictly limited and based on 
rigorously justified operational requirements or need to 
know and must be protected under the special access 
provisions set forth below. 

d. (U) DOD 5200. 1-R requires all Special Access Programs 
in the Department of Defense to be reviewed every 5 years 
to determine continued necessity. The next review, of the 
SIOP-ESI special Access Program will be accomplished in 
June 1989. 
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2. (U) References . Docaments referenced in this directive ^ 

are listed in Annex F. . Z, 

3. (U) Definitions 2 

^ (U) siQg> Materials . Any recorded information, £ 

regardless of its physical form or characteristics, that ^ 

is part of the JCS SIOP or is derived from or published in g 

support of the SIOP and may be represented in any of the ^ 

following forms: 5. 

(1) (U) Written material, whether printed, typed, or 9 

handwritten. , 22. 

(2) (U) Painted or drawn material. ^ 

(J) (U) Electronic or magnetic recording, punchcards, ^ 

or paper tape • 22 

(4) (U) Sound recordings. 

(5) (U) Photographs. 25. 

(6) (U) Reproductions of the foregoing by whatever ^ 

process. 22. 

(7) (U) Materials used in reproduction of the foregoing ^ 

(e.g., typewriter ribbons, copying machine belts, etc.) ^ 

b. (U) SIQP-ESI . Detailed TOP SECRET information and ^ 

material of such an extremely sensitive nature that its n 

22 
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compromise would seriously degrade the eefectiveness of 
the SIOP. Paragraph 4 below discusses specific 
information that are Considered to be SIOP-ESI. 
c. (u) JCS SIOP Documents . The JCS SIOP (Basic) 

source data* 

a. (U) .TQjnt strateg ic Target Planning Staff SIOP 
Documents . Documents published by the Joint Strategic 
Target Planning Staff (JSTPS) in support of tne JCS SIOP. 
e. (U) SIOP Briefings . Any briefing that inclu 
detailed extracts of SIOP information derived from 
material described as SIOP material in subparagraphs 3a 
through 3d above and paragraph 4 below. 

4 . (U) Identification of S IOP-£SI 

a. if) 


( 1 ) (^) 
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( 2 ) (/) 


( 3 ) (/) 
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(5) (ft 


( 6 ) (p 


t^itps documents/ because tbe 

b (U) The following JCS and JSTP 

o. a«.u ..... t». 
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designated. In their entirety, as SIOP-ESI documents. ^ 

U) (U) JSTPS ACS.S consequences of Execution with Tabs j 

and SRF Damage Analysis. ^ 

(2) (U) Appendix III to SIOP Annex E (Coordinating 4 

Instructions). L 

(3) (U) SIOP Annex F (Strike Assignments and Force j 

Timing) and Appendices I, II, m. IV. and V thereto. , 

(4) (0) JCS SIOP Summary, SIOP Annex F (Strike £ 

Assignments and Torce Timing). 

(5) (U) JCS SIOP Decision HantU>ool^ (Black Book), ^ 

(6) (U) JCS Emergency Action Procedures, Volumes II and ^ 

IV. ii 

(7) (U) SIOP Revision Reports. ^ 

(8) (0) Consolidated SIOP Analysis Document. U 

MOTE: Information extracted from these or any SIOP- 13 

ESI document is considered to De SIOP-ESI until 
such time as it has been reviewed by an ^ 

individual who has been designated as an 
original TOP SECUBT c lass i I icat ion authority in ^ 
accordance with DOD 5200. i-R and determined not ^ 
to meet the criteria for SIOP-ESI stated in 21 

subparagraph 3b above. 2^ 
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c. (U) Reconnaissance 


(lata are not SIOP-ESI. 


~) Agencies responsible for SIOP wargamrns 


and 
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-SfiCltET^ 


exercises will consider the followin^j. 

( 1 ) 


(2) (U) The JSTPS and J-8 SIOP war jame reports -ill be ^ 

classified TOP SECRET and marked SIOP-ESI Category XX 18 

-hen they include information described in subparagraph 18 

1 12 . 

77. -...1C Mil./ ^ 
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4a above. Upon completion# war game reports involving 
the SIOP will be submitted to the Joint Chiefs of Staff 
for review and approval. An integral part of the 
approval procedures for such reports will be the review 
and approval of the classification assigned by the 
originator. Reports can be released in accordance with 
the provisions of JCS MOP 39# subparagraph 2a(2) as JCS 
papers or paragraph 6 of this directive as appropriate. 
(3) (U) The use of SIOP-ESI data in the play of command 
post exercises and other war plan exercises is not 
authorized without the approval of the Director# Joint 
Staff. The Director for Operations, Joint Staff# shall 
review such requests and submit recommendations to the 
Director, Joint Staff, for approval, 
f. (U) The listing delineated by subparagraphs 4a through 
4e above is not to be construed as limiting or all 
inclusive, nor will the listing be maintained in a current 
status by changes to this directive. 

5 , (u) Security Classification and Marking 

a. (U) Ail SIOP documents shall be classified and marked 
in accordance with DOD 5200. 1-R. Documents containing 
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SIOP-ESX, as defined and described in paragraphs 3 and 4 
above, shall bear additional markings, as prescribed 
herein. 

b. (U) SIOP-ESI documents shall be classified TOP SECRET 
only. In order to permit immediate and positive identifi- 
cation of these documents, the indicator “SIOP-ESI 
Category XX“ (i.e., 01-10) shall be prominently affixed to 
the front and back cover. This indicator shall also be 
applied to compilations of documents which, although not 
SIOP-ESI individually, may, in the aggregate, be so 
considered . 

c. (U) Correspondence, reports, studies, messages, and any 
other media relaying SIOP-ESI shall include the following 
statement: 

“This (correspondence, memorandum, report, etc.) 
contains SIOP-ESI Category XX data. Access lists 
govern internal distribution." 

d. (U) Messages containing SIOP-ESI shall include the 
designator “SPECAT** and the indicator "SIOP-ESI Category 
XX" with the Category number spelled out, for example 
"SPECAT SIOP-ESI CATEGORY ONE," at tne beginning of the 
message text immediately following the message 
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classificatioa, in accordance with ACP 121 US Supp-1 
(series), followed by the statement in subparagraph 5c 
above, supporting telecommunications centers will 
distribute SIOP-ESI messages based on the SIOP-ESI 
category number and access/distribution lists provided by 
recipients of SIOP-ESI message traffic, 
e. (X) 


MJCS-273-83, 23 December 1983, "Guidance for Sanitiza- 

tion and Distribution of SIOP Information to SACEUR and 
SACLANT” 


1 

2 

3 ^ 

i 

5 

6 

1 7 

8 

9 

10 

U 

12 

13 

14 

i 

ii 

17 

19 

20 
21 
22 


"S ECRg r^ 


12 


Appendix 



-StxrRET 


,U) r.e SIOP-KSX indicator i. HOT a separate security , 

Classification. This indicator is intended solely as a , 

„echanis« for identifying SIOP-extrer.ly sensitive 3 

information that must he controiied in accordance with t e , 
special access procedures established by this directive. ^ 

care must be tahen to ensure that the SXOP-ESI indicator ^ 

is applied to documents only when the contents contain ^ 

information of the type and quantity set forth in ^ 

paragraphs 3 and 4 above. Indiscriminate use of the SXOP- ^ 
CSX indicator will result in unnecessary additions to ^ 

access rosters and undue restrictions on processing of ^ 

documents, which could ultimately result in lessened ^ 

18 

secarity. 

g. (U) SXOP documents, except those sanitised and 19 

authorized for release to HATO under the proyisions of 
^CS-273-S3 Shall be labeled -Hot Releasable to Hon-US ^ 

Rgencies Without Permission of the Originator." 22 
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6. (u) Distribution of SIOP Material and Extracts 

a. (U) The Director for Operations, Joint Staff, OJCS, 
will review the requirements of all users of the JCS SIOP 
prior to the publication of each SIOP and report 
recommended distribution lists will be included in the 
promulgating directives for each SIOP. 

(1) (U) Requests to change approved distribution lists 

will be submitted, with justification, to the Director 
for Operations, Joint Staff, OJCS. The Director for 
operations. Joint Staff, will forward his consideration 
and recommendations to the Director, Joint Staff, who 
is authorized to approve/disapprove such requests. The 
Director of Strategic Target Planning (DSTP) will be 
notified of approved changes. 

(2) (U) Requests to change the number of copies 
provided by approved distribution lists will be 
submitted, with justification, to the DSTP. After 
informal coordination with the Director for Operations. 
Joint Staff, DSTP is authorized to approve/disapprove 
sach requests, 

b. (U) The DSTP is authorized to make distribution of JCS 
SIOP materials for each major revision or update to the 
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Slop under the provisions of subparagraph 6a above, with 

the following stipulations: 

(1) (U) Unless an exception is stated in the approved 

distribution lists, as provided in subparagraph 6a 
above, or amended under the provisions of subparagraph 
6a(l) or 6a(2) above, JCS SIOP materials distributed by 
the DSTP will contain only those data necessary for the 
accomplishment of the assigned tasks, missions, and 
responsibilities of the addressee. 

(2) (U) SIOP-ESI magnetic tapes will be distributed to 

users within the Washington, D.C., area as follows; 

(a) (U) The DSTP will forward one copy of each 
required tape to The Joint Chiefs of Staff, 
Attention; J-3 .Nuclear Warfare Status Branch 
(NWSB), and one copy to the Joint Coordination 
Center (JCC), Fort Ritchie, Maryland. 

(b) (U) The Director for Operations, Joint Staff, 
will reproduce tapes, as required, to satisfy the 
approved requirements of users in the Washington, 
D.C., area. The JCC will use its copy of tapes, 
provided to support JCS requirements delineated in 
JCS Pub 6, Volume II, Part 1. 
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(c) (U) Requests by approved users for reproduced ^ 

tapes or portions or printouts thereof will be 2 

submitted to the Director for Operations, Joint ^ 

Staff, who is authorized to approve/disapprove such ^ 

requests. 5^ 

c. (U) The DSTP is authorized to make distribution of ^ 

JSTPS SIOP materials as follows; 7 ^ 

( 1 ) (U) All JSTPS SIOP material to; £ 

(a) (U) The Chief of Staff, US Army: the Chief of , 

Naval Operations; the Chief of Staff. US Air Force; ^ 
and the Commandant of the Marinb Corps. 

(b) (U) OJCS. 12 

(c) (U) Commands designated by the Joint Chiefs of ^ 

Staff. ii 

(2) (0) Distribution of JSTPS SIOP materials to the ^ 

commands or agencies not covered in subparagraphs 6 a ^ 

through 6 c{l) will be considered on a case-by-case ^ 

basis. Requests will be submitted to the DSTP with 
sufficient justification to complete an appraisal. The 
DSTP may approve such requests as are considered ^ 

necessary for effective operations. Requests not ^ 

22 
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favorably considered by the DSTP will be forwarded to ^ 

the Director for operations, Joint Staff, for review ^ 

dnd action. ^ 

d. (O) Requests for copies of changes to the distribution ^ 

schedule for the SIOP publication, "JSTPS Air Defenses ^ 

Handbook,” will be forwarded to the DIA Dissemination ^ 

Center. 7^ 

e. (U) The Chairman, Joint Chiefs of Staff, consulting the ^ 

other Joint Chiefs of Staff, as appropriate, will approve/ ^ 
disapprove requests for SIOP documents from the White ^ 

House and members of the Senate and House of 

Representatives. ^ 

f. (U) Requests for release of SIOP documents to foreign ^ 

nationals will be submitted to the Director for ^ 

Operations, Joint Staff, for review and recommendations to ^ 
the Joint Chiefs of Staff, except as noted below. ^ 

(1) (U) The DSTP is authorized, in coordination with ^ 

the SACEUR Senior Representative (SACEUR Rep) to the is 

JSTPS, to disclose US classified information, relative ^ 
to current and subsequent SIOPs, to SACEUR and the ^ 

SACEUR Rep to JSTPS, pursuant to, and in accordance ^ 

22 
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with, the policies contained in NDP-1* and JAIEG Case 
N-15/75F.** 

(2) (U) Similarly and in accordance with the same 
policies, the DSTP is authorized to disclose such SIOP 
information to SACLANT as is essential for adequate 
understanding and effective coordination of nuclear 
forces planning. 

(3) (U) Procedures for handling US SIOP information 
within NATO is contained in Annex B to Attachment 1 of 
USSAN Instruction 1-69 (DOD 5700.55, Enel 2), United 
states Implementation of NATO Secur'ity Procedures (U)“ 

g. (U) Recipients of SIOP documents are authorized to 
extract and reproduce portions thereof for such use or 
dissemination to lower echelons as may be required for 
accomplishment of assigned tasks, missions, and 
responsibilities. Reproduction of SIOP document extracts 


* MDP-1 9 Sep 81, “National Policy and Procedures for the 
S^Liisur^of classified Military 

Governments and International Organizations (National D 
closure Policy)'* 

** Joint Atomic Information Exchange Group (JAIEG) 

jMEG case N-15/75F, 10 Dec 75, “Authorization and Release 
procedures for SIOP ATOMAL Information to NATO (U) 
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shall, in every case, be on a ricjidly discriminating basis ^ 
and shall be controlled in accordance with applicable 2 

directives, including this directive. 3 

h. (U) Special procedures for processing extracts from ^ 

SIOP-ESI documents are as follows: ^ 

(1) (U) Release of SIOP data to foreign nationals is ^ 

prohibited, except as authorized under the NATO ^ 

Documents Program and as approved by the Joint Qiiefs ^ 
of Staff. The release of SIOP-ESI data to 5 


SACEUR/SACLANT is discussed in subparagraph 6 f above. ^ 
(2) (U) When extracts are made from SIOP-ESI material 
or when portions of SIOP-ESI material are reproduced. ^ 


meticulous consideration shall be given to the deter- ^ 
mination of appropriate classification and 

identification. It is of particular importance to ^ 

determine whether or not such extracts, or portions 
reproduced, retain characteristics of the type and ^ 

quantity delineated in paragraphs 3 and 4 above and 
should be identified as SIOP-ESI. 
i. (U) Requests for JCS SIOP documents not covered by ^ 

subparagraphs 6 a through 6 h above will be submitted, with ^ 
justification, to the Director for Operations, Joint ^ 
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staff, who will forward the requests and his 1 

recommendations to the Director, Joint Staff. The 2 

Director, Joint Staff, consulting the Chairman, Joint 3 

Chiefs of Staff, as appropriate, will approve/disapprove 4 

these requests. 5 . 

j. (U) Recipients of JCS or JSTPS SIOP documents/mater ials g 
will check the documents/materials for completeness and 7 

will return all receipts within 72 hours of receipt, 8 

reporting immediately any discrepancies noted to 9 

recipient's parent command. Parent commands will inform 
the originating agency within 24 hours after being la 

notified in the event the discrepancy(ies) cannot be 07 

resolved. — 

7. (u) Inventory and sighting il. 

a. (U) All Slop materials defined and identified in 1^ 

paragraphs 3 and 4 above will be inventoried annually, as 

a minimum, or more frequently, as prescribed by the ^ 

classified material control procedures of the appropriate 17 

Service, joint agency, or command, except as specifically ^ 
provided in subparagraph 7 b below. 20 

b. (U) Slop documents that are effective for a single SIOP 2^ 

revision cycle or less will be controlled by document W 


.TjEvTivrri 


20 


Append i x 



SECR ET ^ 


receipt/certificate of destruction procedures in 
accordance with applicable Service and joint agency 
security directives. These documents shall be destroyed 
within 30 days of supersession. Certificates of 
destruction shall be maintained as directed by the 
security directives of the appropriate Service, joint 
agency, or unified and specified command. Command 
internal inspection procedures will be established to 
ensure rigid adherence to those procedures, 
c. (U) The DSTP and other originating agencies shall 
annually, as of 30 September, provide' holders a list of 
documents as follows; 

(1) (U) The basic SIOP and major collections of its 
annexes (i.e., annexes and appendices maintained at 
Service, joint ayency, and unified and specified 
command level). 

(2) (U) All documents not covered in subparagraph 7c (1) 
above that contain SIOP-ESI. 

Documents controlled in accordance with subparagraph 7b 
above will be exempt from this requirement, 
d. (U) Upon receipt of this listing, holders shall verify 
the listing, sight listed documents, and certify the 
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sighting to the originator, who in turn will forward a 1 

consolidated sighting report of each such annual sighting j 
to the secretary, Joint Chiefs of Staff. Discrepancies, 3 

if any, shall be handled separately in accordance with ^ 

paragraph 16 below and reported to the Director, Joint 5 

Staff. 6 

e. (U) To facilitate this inventory and sighting and to ^ 

provide the maximum security, holders of SIOP-ESI material ^ 
should provide for central control of such documents. 9 

8. (U) Access Control 10 . 

a, (u) Control of Access to Non~ESl sfoP I nformation. 11 

Access to SIOP information not identified as SIOP-ESI will ^ 
he controlled in accordance with standard security ^ 

procedures governing access to classified information. It ^ 
is not considered necessary to establish any special ^ 

controls over access to these data. 1£ 

b. (u) Control of Access to SIOP-ESI Information . Access ^ 

to Slop information designated SIOP-ESI shall be subject ^ 
to special control procedures. Services, joint agencies, ^ 
and commands holding or authorized to hold SIOP-ESI data ^ 
are requested to provide implementing instructions for the ^ 
special control procedures outlined below. 2^ 
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(1) (U) Access to SIOP-ESI shall be highly restricted 
and granted on a selective and discriminating need-to- 
know basis in accordance with the guidance set forth in 
subparagraph Ic above. This is especially true of the 
Slop decision and execution process* 

(2) (U) There may be two types of access, PERMANENT and 
TEMPORARY . 

(a) (u) Permanent Access * After considering the 
functions of a given duty position, the frequency 
of anticipated access, and the^ categories of SIOP- 
ESI access required, access granting authorities 
listed in subparagraph 8c below may establish 
permanent SIOP-ESI billets* Although a person 
assigned to a permanent SIOP-ESI billet needs no 
further authorization for access to the categories 
of SIOP-ESI specified for the billet, holders of 
SIOP-ESI information must still verify a valid 
need-to-know before releasing SIOP-ESI information. 
PERMANENT ACCESS BILLETS WILL BE REVIEWED AND 
REAPPROVED BY ACCESS-GRANTING AUTHORITIES LISTED IN 
SUBPARAGRAPH 8c BELOW NOT LATER THAN 31 DECEMBER IN 
EACH EVEN-NUMBERED YEAR. 
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(b) (U) Temporary Access . Access-granting 

authorities listed in subparagraph 8c below may 

grant approval for temporary access « up to 1 year, 

for personnel involved in briefing, studies, or 

other activities that have a projected end date. 

( 3 ) (u) Criteria for Access . Normally, military 

personnel and civilian personnel subject to the 

provisions of the personnel policies of the Office of 

Personnel Management (0PM) and Department of Defense 

may not be authorized permanent or temporary access to 

♦ 

SIOP-ESI unless they meet the basic eligibility, 
criteria set forth below; 

(a) (U) The individual shall be a US citizen- 

(b) (U) The individual shall have a final TOP 
SECRET clearance granted in accordance with the 
policy and criteria prescribed in DOD 5200. 2-R. 

(c) (U) The individual shall have been the subject 
of a completed special background investigation 
(SBI) that meets the criteria set forth in DOD 
5200. 2-R or other types of background 
investigations listed in DOD 5200. 2-R that are 
equivalent to an SBI. 
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Access for these individuals must be essential to the 
performance of their assigned duties and justified by 
their direct involvement in the review, development, 
maintenance, or implementation of the SIOP. 

(4) (U) Those personnel previously granted access to 
SIOP-ESI based upon a background investigation (BI) 
that did not contain all of the elements of an SBI as 
set forth in DOD 5200, 2^R shall be the subject of an 
SBI when a reinvestigation is requested for any reason, 
such as the development of adverse or questionable 
information or when a break in the period of access or 
Federal service exceeds 12 months. 

(5) (U) Waiver of Access. Criteria . When justified by 
compelling need: 

(a) (U) A waiver of the basic eligibility 
requirement stated in subparagraph 8b(3)(b) above 
may be authorized by those access-granting 
authorities listed in subparagraphs 8c(l) through 
8c(5) below for military personnel and civilian 
personnel subject to 0PM and DOD personnel 
policies. This authority may not be delegated. 
Waivers should be approved only if the individual 
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concerned meets all the following criteria: 1 

1. (U) Is being assigned to a position for 2 

which permanent access to SIOP-ESI is required. 3 

2. (U) Already possesses an interim TOP SECRET 4 

clearance granted in accordance with the policy 6 

and criteria prescribed in DOD 5200. 2-R. 6 

2. (U) Has been administered a screening 7 

interview equivalent to that which is used to 8 

screen nominees for access to Sensitive 9 

Compartmented Information (SCI). 10 

4,. (U) Has an SBI initiated. 11 

(b) (U) A waiver of the basic eligibility 12 

requirement stated in subparagraph 0b(3)(c) above 13 

may be authorized for military personnel and 14 

civilian personnel subject to 0PM and DOD personnel 15 

policies. Such waivers must be approved by flag 16 

officer-level, access-granting authorities as 17 

authorized in subparagraphs 8c and 8d below. In 18 

cases where a flag officer is not routinely 19 

available to the unit and delays in processing will ^ 

result in unacceptable operational delays in 21 

assigning personnel to SlOP-related duties, this 22 

authority may be delegated in writing to 0-6 level 
operational unit commanders (i.e. Submarine 
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Squadron Commanders, Wing commanders, or 
equivalent). To be granted a waiver, the 
individual concerned must meet all of the following 
criteria : 

1. (U) Is being assigned to a position for 
which permanent access to SIOP-ESI is required. 

2. (U) Already possesses a final TOP SECRET 
clearance that was based on a standard BI that 
meets the investigative standards of 
paragraph 2, Appendix B, DOD 5200. 2-R. 

2. (U) Has an SBI initiated. 

(c) (U) Approval of waivers for contractor 
personnel will be made only by the Chairman, Joint 
Chiefs of Staff. 

(6) (U) Flag-officer level, access-granting 
authorities, as authorized in subparagraphs 8c and 8d 
below, may approve temporary access to SIOP-ESI 
information for briefings, working meetings, etc., for 
personnel who do not have a completed SBI as required 
by subparagraph 8b<2), provided all of the following 
criteria are met: 

(a) <U) Access is essential to the performance of 
duty and the individual is directly involved in the 
review, development, maintenance, or implementation 
of the Slop. 
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(b) <U) The individual meets the other basic 1 

eligibility criteria specified in subparagraphs 2 

8b(3)(a) and 8b(3)(b) above. 3 

(c) (U) The individual is subject to military, 0PM, 4 

or DOD personnel policies. 5 

(7) (U) Civilian personnel not subject to provisions of 6 

0PM or DOD personnel policies <i.e., contractor 7 

personnel) will not normally be granted access to 8 

SIOP-ESI. Such civilian personnel shall not be granted 9 

permanent access to SIOP-ESI but may be granted 10 

temporary access for periods not to e^^ceed 1 year. 11 

Requests for temporary access for such civilian 12 

personnel shall be referred to the Director, Joint 13 

Staff, for appropriate action. Personnel in this 14 

category for whom temporary access is approved shall 15 

possess a final TOP SECRET clearance and shall meet the 16 

basic security eligibility requirements of DOD 17 

Instruction 5220.28. 18 

( 8 ) (U) Prior to being granted permanent access, all 19 

personnel will be briefed on the contents of this 20 

directive and any supplemental directives considered 21 

appropriate. Once granted, continued access by 22 

individuals will be based on security assurance 

measures established by the granting authority. Upon 
termination of access, appropriate debriefing must be 
■ eE€R E T - ■ 
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accomplished. These briefings will emphasize the 
individual's continuing responsibility for the 
protection of information obtained as a result of his 
access. To satisfy these requirements, each individual 
who is granted permanent SIOP-ESI access will execute 
an appropriate briefing/debriefing certificate, which 
will be maintained for a minimum of 1 year after the 
debriefing of an individual by the command granting 
access. These same requirements apply to personnel 
granted temporary access to SIOP-EfI, except as noted 
in subparagraph 12h below, 

(9) (U) OJCS, Services, unified and specified commands, 
Defense agencies, and JSTPS will; 

(a) (U) Develop procedures to maintain, at an 
appropriate level, SIOP-ESI access listings of 
personnel categorized by military, DOD civilian, 
and industrial contractor personnel. These 
listings will be current as of the last day of each 
quarter and will contain, at a minimum; billet 
number, name, rank/grade, social security number 
(SSN), office/activity/unit designator, category of 
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access, travel/duty restrictions (if applicable), 
and authorization document. Tuinex B is an example 
of a personnel access roster. Such lists shall be 
marked: "subject to the Privacy Act of 1974 (5 

use. Section 552a).” 

(b) (U) Be prepared to provide a numerical count of 
personnel having SIOP-ESI access within 5 working 
days after request, in the categories specified in 
subparagraph 8b(9)(a) above, to the Directorate for 
Information and Resource Management, OJCS, ATTN: 
Security Division. In any case, such a numerical 
report will be provided by 31 January of each 
calendar year. Close-out date for the report will 
be 31 December of the preceding year. To preclude 
duplication in recording, the following 
instructions apply: 

1. (U) Services will record all personnel not 
assigned to the OJCS, Defense agencies, or to 
the staffs of unified and specified commands. 

2. (U) Unified commands will record assigned 
headquarters personnel only. 

3. (U) US Element NORAD and the specified 
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commands (US Space Command, MAC, and SAC) will 
divide personnel into two categories: 
headquarters and all others. 

4. (U) JSTPS will record single-status and 
Scientific Advisory Group personnel. 

5. (U) Guidance for recording of personnel in 
OSD, OJCS, non-DOD agencies, and the Defense 
agencies will be provided by a Joint 
Administrative Instruction. 

(10) (U) The categories of SIOP-ESI listed in Annex A 
shall be used for access control. 

(11) (U) Internal inspection procedures will give 
special and continuing attention to safeguards for 
SIOP-ESI. 

c. (U) Authority to establish billets and grant access to 
SIOP-ESI is delegated to ; 

(1) (U) The Director, Joint Staff, for civilian 
personnel of the White House, members of the Senate and 
House of Representatives, and their staffs. Requests 
must be submitted to the Director a minimum of 7 work 
days prior to the date the access is required. 

(2) (U) The Director, Joint Staff, for the Joint Chiefs 
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of staff# members of the OJCS# other Joint Staff 
agencies# Defense agencies# military personnel assigned 
to the White House and National Security Council 
Staffs# OSD# civilian personnel not subject to the 
provisions of 0PM or DOD policies (i.e.# contractor 
personnel), and others as may be authorized by the 
Joint Chiefs of Staff. These requests must be 
submitted to the Director for Operations, Joint Staff, 
a minimum of 7 work days prior to the date the access 
is required. 

(3) (U) The Chief of Staff# US Army; the Chief of Naval 
Operations; the Chief of Staff, US Air Force; and the 
Commandant of the Marine Corps for members of their 
respective Services and departmental staffs# and 
personnel assigned to the offices of the Secretaries of 
the Military Departments. 

(4) (U) Commanders of unified and specified commands 
having responsibility for planning, preparation, 
coordination, and execution of the SIOP, for members of 
their staffs and subordinate command, and military 
personnel assigned to agencies directly supporting the 
CINC's SlOP-related missions. 
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(5) (U) The Director of Strategic Target Planning for 
members of theJSTPS. 

d. (U) Access to SIOP data, including SIOP-ESI, normally 
shall not be given to foreign nationals, including members 
of NATO, except as authorized by the Joint Chiefs of 
Staff. Procedures for access to US SIOP data released to 
NATO in accordance with subparagraph 6f above are 
contained in Annex B to Attachment 1 of USSAN Instruction 
1069 (DOD 5100.55, Enclosure 2). Access to SIOP-ESI data 
by US personnel assigned to NATO military organizations/ 
agencies normally will be restricted to those sanitized 
data allowed to be provided under the provisions of MJCS 
273-83. US personnel assigned to NATO military 
organizations /agencies who are also members of USEUCOM or 
LANTCOM may be authorized access to other SIOP-ESI by 
USCINCEUR or USCINCLANT. US personnel assigned to NATO 
military organizations/agencies who are not also members 
of USEUCOM or LANTCOM may be authorized access to other 
SIOP-ESI by USCINCEUR. 

e. (U) The authority to grant access delegated in sub- 
paragraph 8c above may be further delegated to 
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appropriate subordinates. Such further delegation shall 
be held at the highest rank and restricted to the minimum 
number of appropriately cleared individuals, consistent 
with operational requirements. 

f. (U) Requests for SIOP-ESI access not covered above will 
be submitted to the Director for Operations, Joint Staff, 
who will forward the request and his recommendations to the 
Director, Joint Staff. The Director, Joint Staff, 
consulting the Chairman, Joint Chiefs Staff, as 
appropriate, will approve/disapprove these requests. 

9. (U) Travel: Persons granted access to SIOP-ESI incur a 

special security obligation and must be aware of the risks 
associated with travel to or through hostile countries. 
SIOP-ESI-cleared personnel must be warned of the risks 
associated with capture, interrogations, harassment, 
entrapment, or exploitation by hostile nations or groups. 
Hazardous activities comprise assignments, visits to, travel 
through, and use of vessels owned or controlled by hostile 
countries, as well as assignment or travel in combat zones or 
other areas where hostilities or terrorist activities are 
trtking place, duties behind hostile lines, and duties or 
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travel in isolated or exposed areas where individuals cannot 
reasonably be protected against hostile action. Individuals 
also must be advised of the potential for terrorism and the 
active and passive measures to avoid becoming a target or 
inadvertent victim of a terrorist act. 

a. (u) Official Travel ; All SIOP-ESI cleared personnel 
performing official travel outside the United States must 
receive a security/anti-terrorist briefing and or risk of 
capture briefing. 

b. (u) Unofficial Travel ; All SIOP-ESI-cleared personnel 
performing unofficial travel to or through hostile 
countries must comply with the provisions below. Failure 
to comply with these provisions may result in the 
withdrawal of approval for continued access to SIOP-ESI. 

(1) (U) Give advance notice of such planned travel to 
local security officer. 

(2) (U) Obtain anti-terrorism briefing from the 
security officer prior to performing such travel. 

(3) (U) Immediately contact the nearest US Consul# 
Attache, or Embassy Regional Security Officer or Post 
Duty officer if detained or subjected to significant 
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harassment or provocation while traveling* 

(4) (U) Report to the specified official upon return 
from travel any unusual incidents, including incidents 
of potential security concern, encountered during such 
travel. 

c. (U) SlOP-cleared individuals whose access is being 
terminated will be officially reminded of their continuing 
obligation to protect SIOP-ESI and will be informed of the 
risks associated with hazardous activities- After SIOP“ 
ESI access is terminated, provisions of paragraph b no 

4 

longer apply. 

10. (U) Visits Requiring Access to SIOP-ESI . Prior to visits 
by personnel who will require access to SIOP-ESI data, the 
headquarters to be visited will be notified of the category 
of SIOP-ESI to which each individual is authorized access. 
This certification is in addition to the requirement to 
certify appropriate security clearances. 

11. (U.) Visits to JSTPS 

a. (U) Requests for visits to JSTPS by civilian personnel 
of the White House, members of Congress, and Congressional 
Staff members will be submitted to and be reviewed and 
approved by the Director, Joint Staff. 
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All Other requests for visits, except working level, will 
be sent to the Director for Operations, Joint Staff, for 
approval. The Director for Operations, Joint Staff, will 
approve /disapprove or forward as appropriate to the 
Director, Joint Staff, visit requests for individuals 
possessing appropriate clearances and a valid need-to- 
know . 

b. (U) All requests for visits should be submitted a 
minimum of 7 working days prior to the visit. The timely 
submission of requests is necessary to provide sufficient 
time for adequate staffing within the Joint Staff. 
Requests should contain a detailed justification for the 
visit, type of information/briefing requested, point of 
contact at JSTPS, and recommendations on the appropriate 
type /classification of briefing to be given. 

c. (U) Members of the Service or CINC staffs who are 
directly involved with SIOP development /support /implemen- 
tation should contact the Joint Secretariat, JSTPS, 
directly for working-level visit approval. Other 
individuals from outside agencies possessing appropriate 
Slop clearances who wish tp visit JSTPS for working-level 
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meetings need only to notify J-3, Strategic Operations 
Division, of visit intentions. 

12. (U) SIOP Briefings 

a. (U) SIOP briefings may be given to those personnel 
under the control or military jurisdiction of the Joint 
Chiefs of Staff or of the Chief of Staff. OS Army; the 
Chief of Naval Operations; the Chief of Staff, US Air 
Force; or the Commandant of the Marine Corps. Access for 
these individuals must be essential to the performance of 
their assigned duties and justified by their direct 
involvement in the review, development, maintenance, or 
implementation of the SIOP. Personnel who do not fall 
into this category require specific approval as indicated 
below . 

b. (U) The SIOP shall not be used as a vehicle of 
instruction at joint or Service schools or other similar 
instructional institutions. Special SIOP briefings given 
to joint or Service schools shall not contain SIOP-ESI and 
will be classified TOP SECRET. Attendance of foreign 
personnel at these briefings is prohibited. SIOP 
briefings for the joint colleges may be scheduled and 
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conducted on a mutually acceptable basis through direct 
coordination between DSTP and the cognizant commandant. 

The Chiefs of the Services will provide approval of such 
requests from Service schools over which they exercise 
cognizance. 

c. (U) SIOP briefings normally shall not be given to 
foreign nationals, including members of NATO. The 
Director, Joint Staff, may approve briefings for military 
members of NATO, provided the briefing is sanitized in 
accordance with MJCS 273-83. Other requests for SIOP 
briefings for foreign nationals may be approved by the 
Joint Chiefs of Staff. 

d. (U) The Chairman, Joint Chiefs of Staff, consulting the 
other Joint Chiefs of Staff, as appropriate, will approve/ 
disapprove requests for SIOP briefings for civilian 
personnel of the White House and members of the Senate and 
House of Representatives. 

e. (U) Briefings on the SIOP Revision Report and War Games 
Report or briefings based on these reports may not be 
given except as provided in the foregoing subparagraphs or 
as approved in accordance with the provisions of JCS MOP 
39 and this directive, as appropriate. 
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t. (U) Requests for SIOP briefings not covered above will 
be submitted to the Director for Operations, Joint Staff, 
who will forward the request and his recommendations to 
the Director, Joint Staff. The Director, Joint Staff, 
consulting the Chairman, Joint Chiefs of Staff, as appro- 
priate, will approve/disapprove these requests. 

g. (U) An approved attendance list will be prepared to 
control entry to SIOP briefings containing SIOP-ESI. 

h. (U) Persons attending SIOP briefings containing SIOP- 

ESI must meet the criteria for eligibility for access to 
SIOP-ESI as specified in subparagraphs 8b(3), (5), and (6) 

above. Persons granted temporary access to SIOP-ESI to 
attend a briefing need not complete a briefing/debriefing 
certificate as required by subparagraph 8b(8) above, 
provided the briefing contains appropriate oral and visual 
warning regarding the sensitivity of the data in the 
briefing . 

13. (U) Training . It is recognized that operational commands 

must conduct SIOP training in order to accomplish their stra- 
tegic operational missions effectively. In this context. 

SIOP indoctrination is required by many operational 
personnel . 
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The policy guidelines for SIOP indoctrination are as follows: 

a. (U) Access shall be strictly controlled on a need-to- 
know basis. 

b. (U) Attendance at indoctrination briefings will be 
restricted to those personnel actually assigned to or 
en route to operational billets that require access to 
SIOP information. 

c. (U) Indoctrination courses may be conducted at opera- 
tional commands that hold SIOP documents or at those 
appropriate training facilities that are under the direct 
supervision/control of the component commanders of the 
several unified and specified commands. Curricula and 
associated material shall be approved by these commanders. 

d. (U) The SIOP may be used as a vehicle of instruction 
provided that the precise, area of indoctrination is 
correlated with billet requirements. 

14. (u) Telecommunications System Processing of SIOP-ESI 

a. (u) Special Category (SPECAT) SIOP-ESI Special Handljjr^ 
Designator . To preclude delivery of SIOP-ESI message 
traffic to a SPECAT terminal that is not specifically 
approved to receive SIOP-ESI messages, communications 
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systems shall apply a special handling designator in tne 
security field of the communications heading of all 
electrically transmitted SIOP-ESI messages to enable 
automatic switch comparison of the SIOP-ESI designator 
against the destination security level authorization. A 
designator indicating SIOP-ESI has been established and is 
promulgated in ACP 121 US Supp-1 (Series). Message 
originators must include this designator in ail SIOP-ESI 
messages (see paragraph 5d). Commanders having 
responsibility for terminals authorized to receive SPECAT 
(less SIOP-ESI) messages will ensure that adequate 
debriefing procedures are established in the event of 
inadvertent delivery of a SIOP-ESI message to the terminal 

affected . 

b. (u) Connection of an hPP System tha t Processes SIOP-ESI 
to a Telecommunications System . An ADP system processing 
SIOP-ESI in accordance with the provisions of Annex C may 
be connected to telecommunications systems such as AUTODIN 
or other nondedicated telecommunications systems only when 
approved by the Joint Chiefs o£ Staff. Requests for 
approval to make such connections should be forwarded to 
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the Director for Operations, Joint Staff, OJCS. Requests 

should address as a minimum: 

(1) (U) The procedures to be followed to ensure the • 

safeguarding of SIOP-ESI. 

(2) (U) Interface design features that will ensure the 
safeguarding of SIOP-ESI. 

(3) (U) The results of evaluations of the interface 
design. 

(4) (u) The results of tests of the interface. 

(5) (U) Security findings and remaining vulnerabilities 

of security concern. 

(6) (U) HOW reapproval will be handled if significant 
interface redesign is required in the future. 

(7) (u) Conclusions and recommendations regarding 
security and the use of the interface to interconnect 
the ADP system to a telecommunications system. 

c. (u) Accreditation of Teleco mmunications Systems To 
Process SIOP-ESI . 

(1) (U) Telecommunications systems such as AUTODIN may 

process and transmit SIOP-ESI data only after the 
system has been accredited by the Joint Chiefs of 
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staff. Requests to accredit telecommunications systems 
to handle SIOP-ESI should be addressed to the Director 
for operations. Joint Staff. OJCS. Requests for 
accreditation should include details regarding imple- 
mentation of a security certification/accreditation 
plan and adhere to guidance outlined in: Defense 

Intelligence Agency Manuals (DIAM) 50-3, "Physical 
Security Standards for Sensitive Compartmented 
Information Facilities"; DIAM 50-4. "Security of 
compartmented Computer Operations?" and DIAM 50-5, 
"Sensitive Compartmented Information Contractor 
Administration Security.” Upon development of the 
Security Certification/Accreditation Plan, it should be 
submitted to the Director for Operations, Joint Staff, 
OJCS, for review and comment by OJCS personnel. The 
plan will outline the procedures to be followed to 
ensure the safeguarding of SIOP-ESI. The plan should 
address how information security will be achieved at 
the outset and how reaccreditation will be achieved 
whenever significant portions of system hardware or 
software are changed. The plan will also address the 
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protective features outlined in subparagraph 5g(0) of ^ 

Annex C. A suggested outline of the plan's contents is ^ 

as follows: 3^ 

(a) (U) Introduction - includes brief description ^ 

of system, purpose, and scope of plan. ^ 

(b) (U) Responsibilities - identifies agencies par- ^ 

ticipating in certification and accreditation ^ 

activity and their roles and responsibilities. g 

(c) (U) System Overview - includes a functional g 

description of the system with appropriate ^ 

definitions of system components, interfaces, etc. ^ 
Additionally, should address security concept, ^ 

operational concept, maintenance concept, and ^ 

procurement process . ^ 

(d) (U) Security Problem - identifies potential 

system security weaknesses. ^ 

(e) (U) Security Approach - describes computer ^ 

security features and communications security ^ 

considerations. 1^ 

(f) Security Activities - describes actions and ^ 

features implemented to ensure security. 21 

22 
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(g) (U) Description of the Accommodation Package 

describes documents comprising recommendation 
package to include the security certification 
evaluation. 

(2) (U) Upon completion of system security activities, 
the final accreditation/certification request should be 
submitted for approval. The request should be 
accompanied by a security certification evaluation 
which addresses the following as a minimum; 

(a) (U) System security design and mode of 
operation . 

(b) (U) System security tests conducted. 

(c) (U) Security findings and remaining 
vulnerabilities . 

(d) (U) Conclusions and recommendations regarding 
security. 

15. (u) Transportation of SIOP-ESI Material 

a. (U) SIOP-ESI material not electrically transmitted via 
secured circuits shall be dispatched only by courier. The 
Armed Forces Courier Service (ARFCOS) should be utilized 
to the maximum extent feasible. Special handling 
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instructions within the ARFCOS system will be as 
prescribed by the Director, ARFCOS. Dispatching officials 
will designate the material SIOP-ESI when entering it into 
the ARFCOS system and will have the following statement 
affixed to the outside of the package or container in 
addition to the normal addresses and markings: 

"restricted handling required" 

(1) (U) Air transportation of this package will be in 

the following priority: military aircraft, regularly 

scheduled US commercial cargo aircraft, government- 

.chartered commercial aircraft, regularly scheduled US 
commercial passenger aircraft (ARFCOS only). 

(2) (U) TWO COURIERS ARE REQUIRED BETWEEN US MILITARY 
INSTALLATIONS/FACILITIES. ONE COURIER CAN BE USED 
DURING FLIGHT SO LONG AS TWO COURIERS DELIVER AND PICK 
UP MATERIAL AT PLANES IDE OFF MILITARY BASES. 

(3) (U) When not attended by qualified couriers, the 
minimum security required for storage of this package 
is in a secure room supplemented by guards or an 
intrusion detection alarm system or a Class A vault 
constructed in accordance with individual Service 
directives. 
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(4) (U) COURIERS AND GUARDS MUST POSSESS TOP SECRET 
CLEIARANCES BASED ON A COMPLETED BACKGROUND 
INVESTIGATION. 

b. (U) commanders supporting ARFCOS are responsible for 
providing arrangements for the transportation of SIOP-ESI 
material by military air. Priority will be provided to 
the shipment of SIOP-ESI material to meet the deadline 
delivery date. 

c. (U) When not transported via ARFCOS, SIOP-ESI material 
being transported or processed outside military 
installations/facilities will be accoiipanied by two 
appropriately cleared couriers (in accordance with the 
handling restrictions delineated in subparagraph 15b 
above) assigned the primary responsibility for 
surveillance and security of the material. When utilizing 
authorized air transportation, as delineated in 
subparagraph 15c(l) and (2) below, one courier may be used 
during flight so long as two couriers are used to 
transport the SIOP-ESI material to and from the aircraft 
and to maintain surveillance until the aircraft is 
airborne . 

(1) (U) The following types of air transportation are 
authorized for movement of SIOP-ESI material: 
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(a) (U) Military aircraft. 

(b) (U) US contract commercial aircraft when the 
manifest is under US military control. 

(c) (U) US commercial nonpassenger cargo aircraft. 

(2) (U) SIOP-ESI material WILL NOT be transported by 
any of the following means: 

(a) (U) Commercial passenger aircraft (except for 
ARFCOS, as described above). 

(b) (U) Department of State Diplomatic Courier 
Service . 

(c) (U) Foreign or combined courier service (such 
as NATO). 

(3) (U) Ground transportation of SIOP-ESI material will 
be, in order of priority, by US Government sedan, US 
Government bus, US Government chartered bus, commercial 
transportation. 

16. (U) Actions in Case of Possible or Actual Compromise . 

The Joint Chiefs of Staff and the DSTP shall be informed by 
the roost expeditious means available, consistent with 
security requirements, of any compromise or suspected 
compromise of any portion of any SIOP material. Such reports 
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Will include specific identification of the document, whether 
or not SIOP-ESI is involved, and an opinion as to probability 
or possibility of compromise. The DSTP will recommend 
appropriate actions required with regard to modification of 
the plan or related procedures as a result of the actual or 
possible compromise for consideration by the Joint Chiefs of 
Staff. The provisions of Chapter VI, DOD 5200. 1-R also 
apply. 

17 , (u) Machine Reproduction of SIOP-E^ . The capability of 

data reproduction by electronic means presents a special need 
for attention to security precautions where such means are 
used in processing classified material. The need is more 
pressing in instances where distribution and access must be 
strictly controlled, as in the case of SIOP-ESI material. 
Commands and agencies that possess the means for machine 
reproduction of SIOP-ESI material, or which are authorized to 
release such materials to other agencies for similar 
reproduction, shall establish suitable and adequate means for 
accounting for and controlling access to SIOP-ESI. In every 
case, such means shall ensure that numbers of copies, 
extracts, or information derivatives are limited to those 
required to serve valid needs. Access to documents and 
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reproduction equipment shall be limited to the minimum 
numbers of properly cleared personnel. Accountability 
systems shall ensure that all documents produced by 
electronic means# including ADP systems, are properly 
identified, marked, distributed, and safeguarded. 

18. (U) ADP 

a. (U) Safeguarding SIOP-ESI in an ADP environment 
requires special precautions achieved by using a 
combination of conventional security procedures and new 
automated techniques. Annex C delineates the minimum 
security requirements for ADP systems. ADP systems 
security should include the following: 

(1) (U) ADP hardware features. 

(2) (U) ADP software features. 

(3) (U) Communications security. 

(4) (U) Emanations security. 

(5) (U) Physical security measures. 

(6) (U) Personnel security measures. 

(7) (U) Procedural safeguards (management, adminis- 
trative, and operational procedures). 

b. (U) Recording media used to store or process SIOP-ESI 
must retain the TOP SECRET classification and be 
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controlled as SIOP-ESI until one of the declassification 
procedures delineated in Annex D is carried out. The 
declassification procedures in Annex D apply to release of 
the recording media for maintenance of equipment, return 
of parts to contractor, and release of computers to 
contractors. 

c, (U) The provisions of Annexes C and D may differ from 
the requirements of communications security (COMSEC) 
materials and information. Refer to appropriate COMSEC 
directives for security requirements and declassification 
procedures- for COMSEC items when COMSEC and SIOP-ESI are 
being processed. 

19. (u) Destruction . As a matter of policy, in order to 
ensure control and minimize the possibility of compromise. 
Slop material will be destroyed promptly when superseded by 
new editions or when no longer required for operational use. 
Archive copies are authorized to be established by JSTPS, as 
prescribed by the Joint Chiefs of Staff, officials 
certifying and witnessing the destruction of material 
containing SIOP-ESI must have authorization for access to the 
category(ies) of SIOP-ESI contained in the material being 
destroyed. 
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ANNEX A 

CATEGORIES OF SIOP-EXTREMELT S^SITIVE 
INFORMATION (SIOP-ESI) (U) 

1 (U) scrupulous discrimination must be used when granting 

access to Categories 01. 02. 04. 09. and 10. Use of one. or 
„ore. of category 03. 05. 06. 07. or 08 is preferable to 
..anting access to Category 01. 02. 04. 09. or 10. Access 
categories are not meant to be a list of greater or lesser 
sensitivity or exposure; they are meant to be subject 
restrictive. The categories are intended to limit access to 
the specific area of duty responsibility. Personnel granted 
permanent or temporary access to SIOP-ESI need no further ~ 
authorisation for access to the specific categories of SIOP- 
ESI specified for a billet; however, holders of SIOP-ESI 
information must still verify a valid need-to-Know before 
releasing SIOP-ESI- 

2. (U) category numbers are unclassified. When associated 

with their definitions, they are CONFIDENTIAI.. 

^3 . {/) 
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examples of SIOP-EXTREMELY SENSITIVE INFOBMATION ACCESS ROSTERS 


SIOP-ESI PERMANENT ACCESS ROSTER FOB (AGENCY) 
(Subject to Privacy Act of 1974) (5 U9C 5S2*)) 


Authorlxation 


Billet No/SSN 

Title/Name 

Rank/Grade 

Service 

SlOP Categories 

Docuaent 



XYOOOOOl 

123-45-6709 

Dir, XYZ Staff 
Doe , John 0 . 

GS-06 

Civ 

02 03 05 07 

DJSM 1234-40, 
28 Sep 1940 



XY000002 

987-65-4321 

Dir, ABC Staff 
Tree, Tall F. 

LTC 

USA 

01 04 09 

J3H 4567-45 
14 Jan 1945 





SIOP-ESI 

(Subject 

TEMPORARY ACCESS ROSTER FOR (AGEKCY) 
to Privacy Act of 1974) (5 USC 552a)) 



Company 

Name 

SSN 

SlOP Categories 

Authorisation 

Document 

Expiration 

Date 

ADPS 

Doe, John Q. 

123-45-6789 

02 03 05 

07 

DJSM 1234-40 
28 Sep 1940 

28 Sep 

1941 

AIS 

Tree, Tall F. 

987-65-4321 

01 04 


J3M 4567-45 
14 Jan 1945 

14 Jul 

194*^ 


Cateqory of access does not automatically determine need for travel/duty restriction. Det 
case-by-case basis, depending on an individual's frequency/degree of access (see Annes E) . 


Determination must be made on 
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ANNEX C 


MINIMUM SECURITY REQUIREMENTS FOR AUTOMATIC DATA 
PROCESSING SYSTEMS PROCESSING SI OP- EXTREMELY 
SENSITIVE INFORMATION (SIOP-ESI) 

An Automatic Data Processing System (ADPS) is defined in 


DOD Directive 7920.1 as an interacting assembly of 
procedures, processes, methods, personnel, communications. 


and automatic data processing equipment to perform a series 
of data processing operations — a combination of automatic 
data processing resources and automated data systems. This 
definition is interpreted as including all peripheral devices 


used in performing data processing operations located within 
or remote to the central ADPS facility. 

2. Authorities listed in subparagraphs 8c(l) through 8c(5) of 


the Appendix may approve the processing of data containing 


SIOP-ESI on an ADPS when operations are controlled as 
indicated below. 

a. The preferred mode of operation is the Dedicated 
Security Mode as defined by paragraph 1-211, DOD 5200. 28-M 


"All portions of this annex are UNCLASSIFIED" 
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b. in exceptional cases where the Dedicated Security Mode 

of Operations is not reasonably practicable, the 

system High Security Mode as defined by paragraph 1-227. 

DOD 5200. 28-M may be used. 

C. Regardless of whether the Dedicated Security Mode or 
the system High Security Mode is used, the ADPS including 
all of its connected peripheral devices and remote 
terminals, must be dedicated to the processing of SIOP- 
related and/or SIOP-ESI and be under the exclusive control 
of persons who are authorized access to SIOP-ESI. 
d. All peripheral devices in areas not manned by personnel 
-cleared for SIOP-ESI must be disconnected from the ADPS by 
either a manually thrown switch or by unplugging at a 
patch panel. 

3. Efficient utilization of the ADPS is important but should 
not be used as a criterion for determining the need-to-know 
and access to SIOP-ESI. 

4. Appropriate procedures will be established for debriefing 
persons not authorized access to SIOP-ESI should inadvertent 
disclosures of SIOP-ESI occur while processing under the 
modes of operation delineated in subparagraphs 2a and 2b 
above. Paragraph 16 of the Appendix will only apply in the 
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case of possible or actual compromise. 

5. Requirements for ADPS containing SIOP-ESI are stated 
below: 

a. adPS security Officer . A Security Officer properly 
cleared for access to SIOP-ESI will be appointed for each 
ADPS that will process data bases containing SIOP-ESI. 

The designated approving authority (DAA) for commands 
having operational responsibility for the ADPS will ensure 
such appointment. The responsibilities of the ADPS 
Security Officer will include; 

(1) Ensuring that each site has written procedures that 
outline operator actions required for known fault/ 
security events. These procedures should include 
operating restrictions, if required, and delineate 
reporting and investigation requirements. 

(2) Ensuring continued compliance with all requirements 
for processing and storing data containing SIOP-ESI 
including the requirements of this directive. 

(3) Ensuring that security deficiencies that occur in 
the operation of the ADPS are expeditiously reported to 
the command DAA. 

(4) Curtailing system processing, pending investigation 
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when continues! operat- ion coul-i lead to compromise. 

(5) Conducting a review of audit trails for security- 
related activities. 

command DAAs will immediately forward to the Director for 
operations. Joint Staff, all security deficiencies they 
consider significant and will forward annual certification 
that the system complies with all requirements for 
processing and storing data containing SIOP-ESI. If 
systems do not comply with all requirements for processing 
and storing data containing SIOP-ESI, command DAAs will 
list deficiencies and proposed corrective actions in their 

annual reports. 

b. Personnel Security and Acce ss Control Measures 
(1) Unescorted access to any portion of the ADPS 
processing SIOP-E&I will be limited to personnel 
authorized access to SIOP-ESI. All other personnel 
requiring access to such areas must be escorted by 
personnel authorized access to SIOP-ESI. The area will 
be inspected prior to such visits to ensure that no 
SIOP-ESI is visible. Escorts are responsible for 
ensuring that no disclosure of SIOP-ESI occurs. 

(2) A personnel access control system will be 
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maintained at the central site and at the remote 
terminal areas to permit ready identification of those 
persons authorized access to the ADPS. 

(3) A record will be maintained of all persons that are 
escorted into the areas identified in subparagraph 
5b(l) above. The ADPS Security Officer will ensure 
that this record is retained for a minimum of 12 months 
from the date of the last entry in the log- 

c. Physical Security Protection . Physical security will 
be in accordance with DOD Directive 5200.1, DOD Regulation 
5200. 1“R, DOD Directive 5200.28, and DOD Manual 5200.28 M. 

d. Communications Links . All communications links will be 
secured in accordance with DOD Directive C-5200.5 for the 
classification of information transmitted. When 
connection is approved by the Joint Chiefs of Staff (see 
subparagraph 14b of the Appendix) and is connected in 
accordance with subparagraph 5g(9) of this annex, and ADPS 
that processes data containing SIOP-ESI may be conducted 
to nondedicated telecommunications systems that have been 
accredited for the transmission of SIOP-ESI (see 
subparagraph 14c of the Appendix). 

e. Emanations Security. All equipment associated with an 
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ADPS, including remote terminals, modems, multiplexers, 
crypto devices, patch panel, etc., that is used to process I 
data containing SIOP-ESI roust roeet the objectives of DOD 

4 

Directive S-5200.19. ADPS equipment processing SIOP-ESI, - 
and not previously TEMPEST tested, will be tested and 5 . 

evaluated at the earliest possible date. If the ADPS - 

equipment is found to be deficient, appropriate counter- 1 

measures will be implemented immediately and a plan will S 
be developed to phase in equipment that will meet TEMPEST 


standards at the earliest possible date. 

£. Security Classification Respo nsibilities. The user is i- 
responsible for verifying that no extraneous data are — 

included in his output product and that the security 
classification indicated on the product is consistent with il 
the data contained therein. He is also responsible for 
reporting all discrepancies. 

g. Software/Hardware Controls . The following features 
will be implemented in each ADPS that is to be used to 
process data containing SIOP-ESI. Special controls will 
be implemented governing access to, and modifications of, 
these features. Where implementation of the following 
features is not feasible because of equipment configuration — 
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or other legitimate reason, other compensating controls 
will be developed and approved for implementation by 
command DAA. 

{ X ) Security Markings and Special Acces s Labels 
(a) All printed material produced from ADPS 
containing SIOP-ESI and operating in accordance 
with paragraph 2 above will have machine-produced 
security markings and special access labels at the 
top and bottom of each page equivalent to the 
highest classification of the data contained in the 
product. In addition, the front covers will be 
marked with a SAFEGUARD statement (see Tab). • 

(b) Removable storage media; i.e., tapes, card 
decks, discs, and similar devices used to store 
data bases containing SIOP-ESI will contain TOP 
SECRET classification markings in accordance with 
DOD 5200. 1-R, with the SIOP-ESI label appropriately 
affixed to the storage media. These security 
markings/labels will be retained until the device 
is declassified by approved procedures described in 
Annex D. 
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(2) User Identification/Authentication . Operation of 
the ADPS will include a raechanism that identifies and 
authenticates user personnel accessing it remotely. 

This mechanism will consist of software and/or hardware 
devices, manual control procedures at terminal sites, 
or other appropriate measures designed to validate the 
identity and access authority of system users. 

(3) Memory Protection . System hardware and software 
features will exercise control over the addresses to 
which a user program has access. 

(4) Separation of User/Executive Modes of Operation. 
Tlie user and executive modes of an ADPS will be 
separated so that a program operating in user mode is 
prevented from performing unauthorized executive 
functions. Controls will be implemented to maintain 
continued separation of these modes. 

( 5 ) Memory Residue Clean-Out . Measures will be 
implemented to ensure that memory residue from 
terminated user programs is made inaccessible to other 
users. This will be accomplished as required by DOD 
5200. 28-M, 
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(6) Access Control . Effective controls will be 
implemented to limit user and terminal access to 
authorized information and programs as well as to 
control read and/or write capability. In addition to 
software, positive disconnection of hardware can also 
be used to control remote terminals. Each individual 
user of the system will have a unique unclassified user 
identification (ID) assigned. Access attempts from 
remote terminals will be limited to TWO attempts, after 
which the terminal will automatically be locked-out and 
the ADP Security Officer notified. 

(7) Audit Trail Capability . Each ADPS will produce an 
audit trail as defined in DOD 5200. 28-M containing 
sufficient information to permit a regular security 
review of system activity. Audit trail information 
will be controlled closely by the ADPS Security Officer 
and, since SIOP-ESI may be contained therein, should be 
marked and handled as SIOP-ESI until actual classifica- 
tion is determined. 

(8) Changing into and out of SIOP-ESI Operatio ns 

(a) Before starting to process SIOP-ESI, the area 
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must be cleared of all unauthorized personnel and i 

unauthorized peripheral devices must be 2 

disconnected. The point of disconnect must be under 3^ 
the control of personnel cleared for SIOP-ESI. £ 

(b) After processing is completed, all removable ^ 

storage media containing files and/or programs used £ 
during SIOP-ESI processing will be disconnected £ 

from the ADPS. If any SlOP-related files or £ 

programs were used and those files or programs are 9 
to be used in a non-SIOP-ESI processing environment, 10 
they must contain no SIOP-ESI or must be purged of U 
any SIOP-ESI prior to such use. All nonremovable ^ 
storage media and memory must be cleared of all L3 

SIOP-ESI. Erase and overwrite procedures ££ 

delineated in Annex D apply if the ADPS is to be 15_ 

used in an unclassified mode. 

(9) Communication Connectivity . If an ADPS that has 1£ 

been approved for processing SIOP-ESI is also approved 18 
for interface with an external telecommunications 19^ 

system, such as AUTODIN or other telecommunication 20 

systems, while processing SIOP-ESI, the following 21 

22 
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adiUtional i>rotect Ive features are rciiulred: ^ 

(a) All interfacing telecommunications channels ^ 

will be protected by cryptographic equipment or ^ 

approved protective wireline distribution system. 4 

(b) Specific measures will be implemented to 5^ 

prevent remote programming of the ADPS via external £ 

telecommunications. 2. 

(c) Procedures will be implemented to protect 8^ 

against accidental spillage of the data base into 9^ 

external telecommunications. 10. 

(d) Procedures will be implemented for fault ^ 

monitoring that will detect malfunctions and halt 
processing when such malfunctions degrade any 1 j 

protective feature. ii. 

(e) Authentication procedures will be employed when ^ 

telecommunications are used for ADPS-to-ADPS 1^ 

operations and/or ADPS-to-Remote user operations to n 
limit access to SIOP-ESI to those network terminals 18 
and ADPS authorized to handle the data. 19. 

Individual Security Responsibilities . All users of the ^ 
ADPS will be briefed on the need for exercising sound 

22 
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security practices in protecting the information stored, 
processed, and produced by the system. Users will be 
informed when the system is operating in accordance with 
paragraph 2 above. Receipt of any information not specif- 
ically requested and of an unknown source shall be 
reported immediately to the ADPS Security Officer. 

i, civilian Contractor ADP Maintenance Personnel . These 
personnel will not be granted access to computer centers 
where data containing STOP-EST is resident in the ADPS 
unless the provisions of subparagraphs 8b(7) and 8b(8) of 
the Appendix have been met. 

j. Reports . When an inadvertent disclosure occurs 
involving an ADPS processing SIOP-EST , the report required 
in paragraph 16 of the Appendix shall be expanded to 
include at a minimum; 

(1) An abstract of the problem. 

(2) The type and source (e.g.. Annex F data from disc 
pack) of the data involved. 

(3) The ADP equipment involved. 

(4) The number of people inadvertently exposed to the 
data. 
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(5) An assessment of the risk of compromise of the 
data. 

(6) Immediate action taken (e.g., system processing 
curtailed as authorized by subparagraph 5a above). 

(7) Steps being taken to preclude a recurrence of the 
problem. 

(8) Comments and recommendations regarding problems 
considered to be of concern to the SIOP community and 
not restricted to the reporting site. This information 
is essential in order to determine the disclosure risk 
level of SIOP-ESI throughout the SIOP community and to 
determine whether similar problems exist on a 
community-wide basis. Reports will be submitted on an 
“as-occurring" basis. 

k. Exceptions . Requests for exceptions to the security 
measures stated above will be submitted to the Director, 
Joint Staff. 
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TAB TO ANNEX C 
SAFEGUARD STATEMENT 
♦♦SAFEGUARD** 

This ADP product was produced during a TOP SECRET STOP- 
ESI period. Handle as TOP SECRET STOP-ESI until this 
statement has been signed by an individual who is 
designated to determine that the security 
classif ication of this document is appropriately marked 
and that the document can assume the handling 
requirements for that classification. Report any 
unusual or unrequested output discrepancies immediately 
tO! — 

Printed/Typed Name 

Signature; Date: 

ADPS Security Officer 

Room Number 

phone Number ^ 

This ADP product has been reviewed by the undersigned. The 
correct security classification of this document is 


Signature ; » Date : 
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Printed/Typed Name 

Room Number 

Phone Number 
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’ ANNEX D 


declassification procedures for adp media-storing 

SI OP- EXTREMELY SENSITIVE INFORMATION (SIOP-ESI) (U) _ 

1. General . Safeguarding classified information in a 1 

computer or computer system requires special precautions i 

because of the types of storage media and devices (magnetic 5 
drums, discs, disc packs, and tapes) used to store, record. 6 

or manipulate data that must be protected by appropriate 7 

classification and security controls until procedures in 8 

9 

paragraph 2 below are carried out. 

2. Declassification . The eventual temporary or outright ii 

release of the storage device or a system including storage U 

media should be anticipated. Procedures to be used in the 12 

event a decision is made to release or deploy the storage 13 

14 

media are as follows: 

-a. Magnetic Tapes . Tapes used to store magnetically il 

recorded digital data may be degaussed and declassified by 16 
erasing with approved tape degaussers that meet technical 12 

specifications promulgated by the Department of Defense. ii 

b. Magnetic Discs. Pics Packs, Dru ms, and Other Simil^ li 

Rigid Magnetic Storage Devices (e.g.. Core Memory). 


“All portions of this annex are UNCLASSIFIED 
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The equipment will be checked immediately prior to 
beginning or after (whichever is appropriate to the 
particular computer) the overwrite procedures to eneure 
that malfunctions do/did not occur that will prevent the 
classified information from being effectively overwritten. 
Further, when the capability exists, as an integral part 
of the storage subsystem, an a.c./d.c. erase will be 
applied to all data tracks before the tracks are 
overwritten and the overwrite verified. Thereafter, all 
storage locations will be overwritten minimum of three 
times; once with all binary ones? once with all binary 
zeros? and once with a single numeric, alphabetic, or 
special character. Such alphanumeric or other 
unclassified data shall be left on the device. The 
current used in overwriting must be equal to or greater 
than that used in recording the information but of a 
strength that will not damage or impair the equipment, 
c, inoperative Magnetic Drums, Discs, Dis c Packs, and 
Similar Rigid Storage Devices . If the storage device has 
failed in such a manner that it cannot be overwritten, the 
device may be declassified by exposing the recording 
8urface(s) to a magnet having a field strength at the 
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recording surface of at least 1,500 Oersted. Care must be 
taken to ensure that the entire surface is wiped at least 
three times by a nonuniform motion of the magnet. Care 
must be taken to ensure that all tracks are covered by the 
center of the magnet. A thin sheet of clear plastic (a 1- 
5 mil sheet) should be used to prevent damage to the 
recording surfaces. 

d. Internal Memory . Detailed memory erase or clearing 
programs or routines should be prepared by qualified 
automatic data processing programmers and approved and 
controlled by the Automatic Data Processing System (ADPS) 
Security Officer. Declassification procedures for main or 
internal memories depend on the type and characteristics 
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( 1 ) Ferrite Core Memory . Ferrite core memory used in 
processing information classified SECRET and below must 
be declassifed by setting each addressable memory 
location alternately to binary high values and binary 
low values for 100 cycles until the state is changed at 
least 99 times. The same procedure applies for 
declassifying core memory used for processing 
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TOP SECRET information, except that the state must be 
changed at least 999 times . 

(2) Plated Wire Memory . Plated wire memory used to 
continuously store classified information undisturbed 
more than 8 hours may not be declassified. Such media 
will continue to retain their classification until 
physically destroyed. If the classified information is 
stored less than 8 hours and unclassified data is later 
stored for at least an equal time, the memory may be 
declassified according to the procedures for magnetic 
ferrite core memory. 

(3) semiconductor Memory . Semiconductor memory may be 
declassified according to the procedures for magnetic 
ferrite core, except for volatile semiconductor memory. 
Volatile semiconductor memory may be declassified by 
setting “O" or "1" in all memory locations. 

C. Magnetic Storage Media Us ed To Store Analog, Video, or 
Similar Nondigital Information . Magnetic tape used to 
record analog, video, or similar types of nondigital 
information may be declassified by degaussing as in 
subparagraph 2a above. There is no approved overwrite 
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method for declass i fying rigid magnetic storage media used 
for nondigital information; specific guidance may be 
obtained as stated in paragraph 5 below. In the case of a 
failure of the tape degausser or in the absence of an 
approved overwrite method for rigid surfaces, a magnet may 
be used, as described in subparagraph 2c above. 

3. Disposition Approval . With the specific approval in each 
case of the designated (systems) approving authority (DAA) 
within the DOD component that is responsible for the security 
features of the ADPS, storage media treated as above may be 
handled as unclassified and released as necessary. 

4. Records . A record of the procedures used to declassify 
each storage media device shall be maintained for a period of 
2 years after disposition of the media or device. 

5. Specific Guidance 

a. Guidance for eradication of storage media not covered 
above may be obtained by submission of all pertinent 
details to the Director, Joint StafL, for consideration on 
a case-by— case basis. 

b. In the absence of eradication by approved equipment or 
procedures or at the direction of the designated official 
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responsible for the security features of the ADPS, 
magnetic information storage media will be safeguarded in 
the manner prescribed for the highest classification ever 
recorded thereon until it is destroyed. 
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cFKrsTTTVE information (SIOP-ESI) lU) 


1 . 


(/) 


7 . (U) purpose . This policy is based upon the need to • 
protect SIOP-ESI from possible compromise resulting from the 
capture, interrogation, exploitation, or entrapment of 
personnel who have or have had access to SIOP-ESI. 
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3. (U) Definitions £ 

a. (U) SIOP-EST. STOP-EST is defined in subparagraph 3b 3 ^ 

of the Appendix. i 

t), (U) Hazardous Activities . Hazardous activities include ^ 

assignments or visits to and travel through countries £ 

listed in the Tab. Hazardous activities also include 7 

assignment or travel in combat zones or other areas where g 

hostilities are taking place, duty behind hostile lines, 9 ^ 

and duty or travel in isolated or exposed areas where ^ 

individuals cannot reasonably be protected against hostile ^ 
action. 12. 

c, (U) Foreign Travel Briefings . These briefings alert ^ 

traveling personnel to the potential for harassment, ^ 

provocation, or entrapment by foreign intelligence ^ 

services in overseas areas and in other environments of an 
international nature, such as conferences, scientific and ^7 
technical meetings, seminars, and symposiums. They ^ 

examine foreign intelligence service methods of operation ^ 
and suggest precautions designed to minimize the risk of 2^ 

direct foreign intelligence exploitation of personnel ^ 

during periods of temporary duty or leave. 22 
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a. (U) Antiterrorist Briefings . These briefings advise 2 

personnel of a variety of measures that may be employed to 3 
safeguard oneself against terrorist threats in overseas £ 

areas. 5 . 

^U) Policy . Personnel who have detailed knowledge and g 

continuing access to SIOP-EST information at Service, joint 7 

agency, or unified and specified command level may be subject g 
to travel and assignment restrictions, as determined by the 
authority granting access. 

a. (U) Official Assignment/Travel ’ ^ 

(1) (U) To tHTe extent practicable, personnel with ^ 

detailed knowledge and continuing access to SIOP-ESI ^ 

should not be assigned to or directed to participate in ^ 

hazardous activities. Regardless of the degree of ^ 

access, all personnel who have access to STOP-EST must ^ 

be appropriately briefed prior to participation in any ^ 

hazardous activity or visit as defined in subparagraph ^ 

3 b above. 

(2) (U) prior to official visits to or travel through 2£ 

the countries listed in the Tab, personnel who have ^ 

access to STOP-EST must; 
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(a) (U) Give their supporting security office ^ 

advance notice of such planned travel. 3^ 

(b) (U) Obtain foreign travel and ant i ter ror is t £ 

briefings before traveling to such countries, ^ 

(c) (U) Immediately contact the nearest US Consul £ 

Attache, or Embassy Regional Security Officer or 7 

post Duty Officer if detained or subjected to £ 

significant harassment or provocation while 9 

traveling. ^ 

(d) (U) Report to the specified official upon 11 


return from travel any unusual incidents, including i£ 
incidents of potential security concern, encountered i£ 


during such travel. 14 

NOTE; Individuals who frequently travel, or attend or 1 £ 

host meetings of foreign visitors of the types 
described in subparagraphs 3c above, need not be l£ 

briefed for each such occasion, but shall be 
provided a thorough briefing at least once each 6 - 1 £ 

month period and a general reminder of their 
security responsibilities prior to each such 18 

activity, 

ii 

b. (U) Unofficial Travel 20 


(1) (U) prior to unofficial visits to or travel through 2 ^ 

the countries listed in the Tab, personnel who have 22 


access to STOP-EST must take the actions outlined in 
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subparagraph 4a (2) above. 

(2) (U) Access-granting authorities may deny unofficial 

travel by notifying the requester in writing of the 
specific conditions upon which the denial is based, 
c. (U) Actions Required of All Persons Traveling to_or 
Through Designated Countries (se e Tab). 

(1) (U) During official or unofficial visits to or 
travel through the countries listed in the Tab. persons 
who have access to SIOP-ESI MUST immediately contact 
the nearest US consular, attache, or Embassy official 
if they have been detained or subjected to significant 
harassment or provocation while traveling. 

(2) (U) Persons who have access to SIOP-ESI must be 
reminded annually of the foregoing obligations through 

security education programs, 
d. (U) individuals With Previous Access . Persons whose 
access to SIOP-ESI is being terminated will be officially 
reminded if their obligation to ensure continued 
protection of SIOP-ESI and reminded of the risks 
associated with hazardous activities as defined herein. 

5. (u) Respong^^^^^^^^^ 
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a. (U) The Directorate for Information and Resource 
Management, OJCS, will prepare and disseminate to the 
holders of this document an updated list of countries 
(Tab) identified as posing a security risk bearing on this 
policy as changes occur. 

b. (U) Access-granting authorities will issue implementing 
directives concerning travel and assignment of personnel 
under their cognizance. 
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ANNEX F 1 

REFERENCES 2 

1. Executive Order 12356, 2 April 1982, "National Security 3 

Information" 4 

2. Public Law, 93-579, Title 5, United States Code, Section ^ 

552a, (Privacy Act of 1974) g 

3. DOD Directive 5100.55, 21 April 1982, "United States ^ 

Security Authority for North Atlantic Treaty Organization g 

Affairs" (USSAN Instruction 1-69) 9 

4. DOD Directive 5200.1, 7 June 1982, "DOD ;[nformation 

Security Program” n 

5. DOD Regulation 5200. 1-R, June 1986, "Information Security ^2 

Program Regulation" 13 

6 . DOD Regulation 5200. 2-R, January 1987, "DOD Personnel j ^4 

Security Program" 15 

7. DOD Directive C-5200.5, 6 October 1981, "Communications 
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SECRET 

1 December 1987 


FIRST CORRIGENDUM TO MJCS 75-87 
"Safeguarding the Single Integrated Operational Plan" 

Note by the Secretaries 

Holders are requested to substitute the attached revised pages 
and to destroy the superseded pages in accordance with security 
regulations . 


Secretaries 


INTERNAL STAFF PAPER Regraded UNCLASSIFIED 

RELEASE COVERED BY Without Attachment 

JCS MOP 39 


SECRET 

1st Corrig to MJCS 75-87 



OFFICE OF THE CHAIRMAN 

THE JOINT CHIEFS OF STAFF 
WASHINGTON, D.C. 2031MM01 


Reply ZIP Code: 
20318-0300 


MCM-98-90 
13 June 1990 


MEMORANDUM FOR HOLDERS OF MJCS 75-87 

Subject; First Note to Holders on "Safeguarding the Single 
Integrated Operational Plan" 


1. The Appendix to MJCS 75-87 has been revised to reflect 
changes in the special background investigation waiver 
authority. Holders are requested to substitute the attached 
revised pages 26, 27, and 28, and to destroy the superseded 
pages in accordance with security regulations, 

2. Holders of MJCS 75-87 are requested to attach a copy of 
this memorandum to the document for record purposes, 

3. This memorandum and the enclosure are UNCLASSIFIED. 


For the Chairman, Joint Chiefs of Staff: 



Major General, USMC 
Vice Director, Joint Staff 
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THE JOINT CHIEFS OF STAFF 
WASHINGTON 0 C. 70301 -5000 


MJCS 75-87 
20 May 1987 


MEMORANDUM FOR: DISTRIBUTION LIST 

Subject: Safeguarding the Single Integrated Operational Plan 


1. The Appendix contains the policy of the Joint Chiefs of Staff 
with regard to security of the Single Integrated Operational Plan 
(SIOP), the basic administrative and handling requirements, and 
the emphasis that must be placed on control of SIOP-Ex treraely 
Sensitive Information (SIOP-ESI). 

2. This memorandum supersedes SM-313-83, 10 May 1983, 
"Safeguarding the Single Integrated Operational Plan." 

3. Without enclosure, this memorandum is UNCLASSIFIED. 


For the Joint Chiefs of Staff: 




RICHARD A. BURPEE 
Lieutenant General, USAF 
Director for Operations 
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WASHMOTON, D.C. 2031»^1 


Reply ZIP Code: 
20318-0300 


MCM-98-90 
13 June 1990 


MEMORANDUM FOR HOLDERS OF MJCS 75-87 

Subject: First Note to Holders on “Safeguarding the Single 

Integrated Operational Plan” 


1. The Appendix to MJCS 75-87 has been revised to reflect 
changes in the special background investigation waiver 
authority. Holders are requested to substitute the attached 
revised pages 26, 27, and 28, and to destroy the superseded 
pages in accordance with security regulations. 

2. ^ Holders of MJCS 75-87 are requested to attach a copy of 
this memorandum to the document for record purposes. 

3. This memorandum and the enclosure are UNCLASSIFIED. 


For the Chairman, Joint Chiefs of Staff: 



Major General, USMC 
Vice Director, Joint Staff 




Enclosure 
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SAFEGUARDING THE SINGLE INTEGRATED OPERATIONAL PLAN (U) 

I . (U ) Genera I 

a. (U) The guidance lierein sets forth the policy of the 
Joint Chiefs of Staff with re<jard to security of the 
Single Integrated Operational Plan (SIOP). This directive 
is intended to: 

(1) (U) Emphasize the need for strict observance of 
basic security regulations in safeguarding the SIOP. 

(2) (U) Emphasize that stringent control must be 
exercised over SIOP-Extremely Sensitive Information 
(SIOP-ESI), as defined below. 

(3) (U) Provide the basic policy for the identification 
of SIOP-ESI. 

(4) (U) Set forth specific security controls and 
procedures to ensure that distribution of and access to 
SIOP-ESI are authorized with utmost discrimination in 
all cases. 

b, (U) Executive Order 12356, DOD 5200.1 and DOD 5200. 1-R 

provide instructions for the DOD Information Security 

Program. These documents prescribe measures for 
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classification, reproduction, accountabil i ty , safekeeping, 
storage, dissemination, and transmission of official 
information and include witliin their scope the documents 
that constitute the SIOP. This directive is supplemental 
to the preceding directives and applies more specifically 
to SIOP-ESI, as described herein. 

c. (U) The Joint Chiefs of Staff consider the information 
described in subparagraph 3b and paragraph 4 to be an 
extremely high-level enemy intelligence collection target. 
Its disclosure to unauthorized persons could clearly 
result in serious degradation of the effectiveness of the 
SIOP and therefore, should be designated SIOP-ESI. The 
Joint Chiefs of Staff consider that distribution of and 
access to SIOP-ESI must be strictly limited and based on 
rigorously justified operational requirements or need to 
know and must be protected under the special access 
provisions set forth below. 

d. (U) DOD 5200. 1-R requires all Special Access Programs 
in the Department of Defense to be reviewed every 5 years 
to determine continued necessity. The next review of the 
SIOP-ESI Special Access Program will be accomplished in 
June 1989. 
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2. (U) References » Documents referenced in this directive 
are listed in Annex F, 

3. (U) Definitions 

a. (U; SIOP Materials . Any recorded information, 
reyardless of its t^hysical form or cliaracter i s t ics , that 
is part of tlie JCS SIOP or is derived from or published in 
support of the SIOP and may be represented in any of the 
following forms: 

(1) (U) Written material, whether printed, typed, or 
handwr i tten . 

(2) (U) Painted or drawn material. 

(3) (U) Electronic or magnetic recording, punchcards, 
or paper tape. 

(4) (U) Sound recordings. 

(5) (U) Pnotographs. 

(6) (U) Reproductions of the foregoing by whatever 
process . 

(7) (U) Materials used in reproduction of the foregoing 
(e.g., typewriter ribbons, copying machine belts, etc.) 

b. (U) SIQP-ESI . Detailed TOP SECRET information and 
material of such an extremely sensitive nature that its 
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compromise would seriously degrade the effectiveness of 
the SIOP. Paragrax^h 4 below discusses specific kinds of 
information tliat are considered to be SIOP-l£SI. 

c. (U) JCS SIOP Documents . The JCS SIOP (Basic) and 
annexes, appendices, and tabs thereto, and associated 
source data. 

d. (U) Joint Strategic Target Planning Staff SIOP 
Documents . Documents published by the Joint Strategic 
Target Planning Staff (JSTPS) in support of the JCS SIOP, 

e. (U) SIOP Briefings . Any briefing that includes 
detailed extracts of SIOP information derived from 
material described as SIOP material in subparagraphs 3a 
through 3d above and paragraph 4 below. 

4. (U) Identification of SIOP-£SI 
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b. (U) The following JCS and JSTPS documents, because the “ 

/ * 20 
level/amount of detail meets the criteria of subparagraph — 

21 

4q above, are considered to be extremely sensitive and are — 
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des , in their entirety, as SIOP-ESI docaments. 

(1) (U) JSTPS AC&S Consequences of Execution with Tabs ^ 

and SRF Damage Analysis. 2 

(2) (U) Appendix III to SIOP Annex E (Coordinating ^ 

Instructions ) . 5 

(3) (U) SIOP Annex F (Strike Assignments and Force ^ 

Timing) and Appendices I, II, III, IV, and V thereto. ^ 

(4) (U) JCS SIOP Summary, SIOP Annex F (Strike g 

Assignments and Force Timing). ^ 

(5) (U) JCS SIOP Decision Handbook (Black Book). 

(0) (U) JCS Emergency Action Procedures, Volumes II and 

IV. ^ 

(7) (U) SIOP Revision Reports. 

(8) (U) Consolidated SIOP Analysis Document. 

NOTE: Information extracted from these or any SIOP- 

ESI document is considered to be SIOP-ESI until 
such time as it has been reviewed by an 
indiviclual who has been tJesignated as an 
original TOP SECRET c lass i I icat ion autliority in 2^9 
accordance with DOD 5200. 1-R and determined not 20 

to meet the criteria for SIOP-ESI stated in 21 

subparagraph 3b above. 22 
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(U) Reconnaissance data are not SIOP-ESI. - 
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exercises will consider the followin-j: 
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(2) (U) The JSTPS and J-8 SlOP war ^ame reports will be 
classified TOP SfiCRET and marked SIOP-ESI Category XX 
when they include information described in subparagraph x9 

* 20 

*SM-81-77, 1 Feb 17, "Basic Policy Guidance on Wargaming (U)" 21 

22 
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4a above. Upon completion, war game reports involving L 
the Slop will be submitted to the Joint Chiefs of Staff 
for review and approval. An integral part of the 2 

approval procedures for such reports will be the review 2 
and approval of the classification assigned by the 2 

originator. Reports can be released in accordance with £ 
the provisions of JCS MOP 39, subparagraph 2a(2) as JCS 1 

papers or paragraph 6 of this directive as appropriate. £ 

(3) (U) The use of SIOP-ESI data in the play of command £ 
post exercises and other war plan exercises is not 
authorized without the approval of the Director, Joint ii 
Staff. The Director for Operations, Joint Staff, shall 
review such requests and submit recommendations to the — 
Director, Joint Staff, for approval. ii 

f. (U) The listing delineated by subparagraphs 4a through 15. 

4e above is not to be construed as limiting or all 15. 

inclusive, nor will the listing be maintained in a current 12. 
status by changes to this directive. 15. 

5 . ( U ) Security Classification and Marking 15. 

a. (U) All Slop «locuments shall be classified and marked 15. 

in accordance with DOD 5200. 1-R. Documents containing H 

22 
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SIOP-ESI, as defined and described in paragraphs 3 and 4 
above, shall bear additional markings, as prescribed 
herein . 

b. (U) SIOP-ESI documents shall be classified TOP SECRET 
only. In order to permit immediate and positive identifi- 
cation of these documents, the indicator "SIOP-ESI 
Category XX'* (i.e., 01-10) shall be prominently affixed to 
the front and back cover. This indicator shall also be 
applied to compilations of documents which, although not 
SIOP-ESI individually, may, in the aggregate, be so 

cons idered . 

c. (U) Correspondence, reports, studies, messages, and any 
other media relaying SIOP-ESI shall include the following 
statement : 

"This (correspondence, memorandum, report, etc.) 
contains SIOP-ESI Category XX data. Access lists 
govern internal distribution." 

d. (U) Messages containing SIOP-ESI shall include the 
designator "SPECAT" and the indicator "SIOP-ESI Category 
XX" with the Category number spelled out, for example 
"SPECAT SIOP-ESI CATEGORY ONE," at the beginning of the 
message text immediately following the message 
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classification, in accordance with AGP 121 US Supp-1 
(Series), followed by the statement in subparagraph 5c 
above. Supporting telecommunications centers will 
distribute SIOP-ESI messages based on the SIOP-ESI 
category number and access/distribution lists provided by 
recipients of SIOP-ESI message traffic, 

j 

j 



* MJCS-273-83, 23 December 1983, "Guidance for the Sanitiza- 
tion and Distribution of SIOP Information to SACEUR and 
SAGLANT" 
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^ 1 

5 

f. (U) Tlic SIOP-ESI indicator is NOT a separate security ^ 

classiCication. This indicator is intended solely as a ^ 

mechanism for identifying SlOP-extremely sensitive g 

information that must be controlled in accordance with the ^ 
special access procedures established by this directive. 

Care must be taken to ensure that the SIOP-ESI indicator 

is applied to documents only when the contents contain 
information of the type and quantity set forth in ^ 

paragraphs 3 and 4 above. Indiscriminate use of the SIOP- 
ESI indicator will result in unnecessary additions to ^ 

access rosters and undue restrictions on processing of ^ 

documents# whicn could ultimately result in lessened 

security. ^ 

g. (U) SIOP documents# except those sanitized and ^ 

authorized for release to NATO under the provisions of 20 

MJCS-273-83 shall be labeled "Not Releasable to Non-US ^ 

Agencies Without Permission of the Originator." 22 
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6. (u) Distribution of SIOP Material and Extracts 

a. (U) The Director for Operations, Joint Staff, OJCS, 
will review the requirements of all users of the JCS SIOP 
prior to the publication of each SIOP and report 
recommended distribution lists will be included in the 
promulgating directives for each SIOP. 

(1) (u) Requests to change approved distribution lists 
will be submitted, with justification, to the Director 
for Operations, Joint Staff, OJCS. The Director for 
Operations, Joint Staff, will forward his consideration 
and recommendations to the Director, Joint Staff, who 
is authorized to approve/disapprove such requests. The 
Director of Strategic Target Planning (DSTP) will be 
notified of approved changes. 

(2) (U) Requests to change the number of copies 
provided by approved distribution lists will be 
submitted, with justification, to the DSTP. After 
informal coordination with the Director for Operations, 
Joint Staff, DSTP is authorized to approve/disapprove 
such requests. 

b. (U) The DSTP is authorized to make distribution of JCS 
SIOP materials for each major revision or update to the 
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Slop under the provisions of subpara«^raph 6a above, with 
the following stipulations: 

(1) (U) Unless an exception is stated in the approved 
distribution lists, as provided in subparagraph 6a 
above, or amended under the provisions of subparagraph 
6a(l) or 6a(2) above, JCS SIOP materials distributed by 
the DSTP will contain only those data necessary for the 
accomplishment of the assigned tasks, missions, and 
responsibilities of the addressee. 

(2) (U) SIOP-ESI magnetic tapes will be distributed to 
users within the Washington, D.C., area as follows: 

(a) (U) The DSTP will forward one copy of each 

required tape to The Joint Chiefs of Staff, 
Attention: J-3 Nuclear Warfare Status Branch 

(NWSB), and one copy to the Joint Coordination 
Center (JCC), Fort Ritchie, Maryland. 

(b) (U) The Director for Operations, Joint Staff, 
will reproduce tapes, as required, to satisfy the 
approved requirements of users in the Washington, 
D.C., .icea. The JCC will use its copy of tapes 
provided to support JCS requirements delineated in 
JCS Pub 6, Volume II, Part 1. 
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(c) (U) Requests by approved users for reproduced ^ 
tapes or portions or printouts thereof will be ^ 

submitted to the Director for Operations, Joint ^ 

Staff, who is authorized to approve/disapprove such ^ 
requests. ^ 

c. (U) The DSTP is authorized to make distribution of ^ 

JSTPS Slop materials as follows: ^ 

(1) (U) All JSTPS SIOP material to: g 

(a) (U) The Chief of Staff, US Army; the Chief of ^ 

Naval Operations; the Chief of Staff, US Air Force; 
and the Commandant of the Marine Corps. 

(b) (U) OJCS. 12 

(c) (U) Commands designated by the Joint Chiefs of 

Staff. 14 

(2) (U) Distribution of JSTPS SIOP materials to the 

commands or agencies not covered in subparagraphs 6a 
through 6c(l) will be considered on a case-by-case 
basis. Requests will be submitted to the DSTP with 
sufficient justification to complete an appraisal. The 
DSTP may approve such requests as are considered 20 

necessary for effective operations. Requests not 21 

22 
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favorably considered by the DSTP will be forwarded to 
the Director for Operations, Joint Staff, for review 


1 


2 

and action. 2 

d. (U) Requests for copies of changes to the distribution ^ 

schedule for the SIOP publication, "JSTPS Air Defenses ^ 

Handbook," will be forwarded to tiie DIA Dissemination ^ 

Center. 

e. (U) The Chairman, Joint Chiefs of Staff, consulting the ^ 
other Joint Chiefs of Staff, as appropriate, will approve/ ^ 
disapprove requests for SIOP docu ments from the Whit e 

|louse and members of the Senat e and House o f 
Representative s . 

f. (U) Requests for release of SIO P documents to foreign 
nationals will be submitted to the Director for 
Operations, Joint Staff , for review and recommendations to 
the Joint Chiefs of Staff, except as noted below . 

(1) (U) The DSTP. is authorized, in coordination with 

the SACEUR Senior Representative (SACEUR Rep) to the 
JSTPS, to disclose US classified information, relative 
to current and subsequent SIOPs, to SACEUR and the 2 q 

SACEUR Rep to JSTPS, pursuant to, and in accordance 2 i 

j 
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with, the policies contained in NDP-1* and JAIEG Case ^ 

N-15/75F.** 2 

(2) (U) Similarly and in accordance with the same ^ 

policies, the DSTP is authorized to disclose such SIOP ^ 
information to SACLANT as is essential for adequate 5 

understanding and effective coordination of nuclear g 

forces planning. 7_ 

(3) (U) Procedures for handling US SIOP information ^ 

within NATO is contained in Annex B to Attachment 1 of 9 ^ 
USSAN Instruction 1-69 (DOD 5700.55, Enel 2), United ^ 
States Implementation of NATO Security Procedures (U)" ^ 

g. (U) Recipients of SIOP documents are authorized to ^ 

extract and reproduce portions thereof for such use or 23 

dissemination to lower echelons as may be required for 14 

accomplishment of assigned tasks, missions, and ^ 

responsibilities. Reproduction of SIOP document extracts 

17 

* NDP-1, 9 Sep 81, "National Policy and Procedures for the ^ 
Disclosure of Classified Military Information to Foreign 
Governments and International Organizations (National Dis- ^ 
closure Policy)" 

** Joint Atomic Information Exchange Group (JAIEG) memorandum — 
JAIEG Case N-15/75F, 10 Dec 75, "Authorization and Release 
Procedures for SIOP ATOMAL Information to NATO (U)' — 

22 
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shallf in every case# be on a rigidly discriminating basis ^ 

and shall be controlled in accordance with applicable ^ 

directives, including this directive. ^ 

h, (U) Special procedures for processing extracts from ^ 

SIOP-ESI documents are as follows; ^ 

(1) (U) Release of SIOP data to foreign nationals is ^ 

prohibited, except as authorized under the NATO ^ 

Documents Program and as approved by the Joint Chiefs ^ 
of Staff. The release of SIOP-ESI data to ^ 

SACEUR/SACLANT is discussed in subparagraph 6f above. 

(2) (U) When extracts are made from SIOP-ESI material 
or when portions of SIOP-ESI material are reproduced, 
meticulous consideration shall be given to the deter— 
mination of appropriate classification and 
identification. It is of particular importance to 
determine whether or not such extracts, or portions 
reproduced, retain characteristics of the type and 
quantity delineated in paragraphs 3 and 4 above and 
should be identified as SIOP-ESI. 

i. (U) Requests for JCS SIOP documents not covered by 20 

subparagraphs 6a through 6h above will be submitted, with 21 
justification, to the Director for Operations, Joint 22 
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staff/ who will forward the requests and his ^ 

recommendations to the Director/ Joint Staff. The 2 

Director/ Joint Staff/ consulting the Chairman/ Joint 2 

Chiefs of Staff/ as appropriate/ will approve/disapprove ^ 

these requests. 5^ 

j. (U) Recipients of JCS or JSTPS SIOP documents/materials g 
will check the documents/materials for completeness and ^ 

will return all receipts within 72 hours of receipt, ^ 

reporting immediately any discrepancies noted to 9 

recipient's parent command. Parent commands will inform 
the originating agency within 24 hours after being 
notified in the event the discrepancy ( ies ) cannot be ^ 

resolved. 

7. (U) Inventory and Sighting l± 

a. (U) All SIOP materials defined and identified in ^ 

paragraphs 3 and 4 above will be inventoried annually/ as ^ 

a minimum, or more frequently, as prescribed by the ^ 

classified material control procedures of the appropriate ^ 
Service, joint agency, or command, except as specifically ^ 
provided in subparagraph 7b below. 2^ 

b. (U) SIOP documents that are effective for a single SIOP 2_^ 

revision cycle or less will be controlled by document ^ 
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receipt/certificate of destruction procedures in 
accordance with applicable Service and joint agency 2 

security directives. These documents shall be destroyed ^ 

within 30 days of supersession. Certificates of ^ 

destruction shall be maintained as directed by the 5 

security directives of the appropriate Service, joint ^ 

agency, or unified and specified command. Command ^ 

internal inspection procedures will be established to g 

ensure rigid adherence to those procedures. 9 

c. (U) The DSTP and other originating agencies shall 10 

annually, as of 30 September, provide holders a list of H 
documents as follows: 1 ^ 

(1) (U) The basic SIOP and major collections of its 13 

annexes (i.e., annexes and appendices maintained at 1 £ 

Service, joint agency, and unified and specified 1 ^ 

command level). ^ 

(2) (U) All documents not covered in subparagraph 7c(l) 17 

above that contain SIOP-ESI . 1^ 

Documents controlled in accordance with subparagraph 7b ^ 
above will be exempt from this requirement. ^ 

d. (U) Upon receipt of this listing, holders shall verify 2 ^ 

the listing, sight listed documents, and certify the 22 
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sighting to the originator, who in turn will forward a ^ 

consolidated sighting report of each such annual sighting 2 

to the Secretary Joint Chiefs of Staff. Discrepancies, ^ 

if any, shall be handled separately in accordance with ^ 

paragraph 16 below and reported to the Director, Joint ^ 

Staff. ^ 

o 

e. (U) To facilitate this inventory and sighting and to ^ 

provide the maximum security, holders of SIOP-ESI material g 
should provide for central control of such documents. ^ 

8. (U) Access Control 

a. (U) Control of Access to Non~ESI SIOP Information . 

Access to SIOP information not identified as SIOP-ESI will ^2 
be controlled in accordance with standard security ^^2 

procedures governing access to classified information. It 
is not considered necessary to establish any special 
controls over access to these data. 

b. (U) Control of Access to SIOP-ESI Information . Access 
to SIOP information designated SIOP-ESI shall be subject 
to special control procedures. Services, joint agencies, 

and commands holding or authorized to hold SIOP-ESI data 20 
are requested to provide implementing instructions for the 2 I 
special control procedures outlined below. 22 
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(1) (U) Access to SIOP-ESI shall be highly restricted 
and granted on a selective and discriminating need-to- 
know basis in accordance with the guidance set forth in 
subparagraph Ic above. This is especially true of the 
Slop decision and execution process. 

(2) (U) Tliere may be two types of access, PERMANENT and 
TEMPORARY . 

(a) (U) Permanent Access . After considering the 
functions of a given duty position, the frequency 
of anticipated access, and the categories of SIOP- 
ESI access required, access granting authorities 
listed in subparagraph 8c below may establish 
permanent SIOP-ESI billets. Although a person 
assigned to a permanent SIOP-ESI billet needs no 
further authorization for access to the categories 
of SIOP-ESI specified for the billet, holders of 
SIOP-ESI information must still verify a valid 
need-to-know before releasing SIOP-ESI information. 
PERMANENT ACCESS BILLETS WILL BE REVIEWED AND 
REAPPROVED BY ACC ESS -GRANT I NG AUTHORITIES LISTED IN 
SUBPARAGRAPH 8c BELOW NOT LATER THAN 31 DECEMBER IN 
EACH EVEN-NUMBERED YEAR. 


1 

2 

3 

4 

5 

6 

7 

8 
9 

ii 

n 

H 

13 

ii 

IS 

ii 

17 

18 


19 


20 

ii 

22 


UNCLASSIFIED 


23 


Appendix 



UNCLASSIFIED 

< ; EGRET 




(b) (U) Temporary Access . Access-granting 
authorities listed in subparagraph 8c below may 
grant approval for temporary access, up to 1 year, 
for personnel involved in briefing, studies, or 
other activities that have a projected end date. 
(3) (U) Criteria for Access . Normally, military 
personnel and civilian personnel subject to the 
provisions of the personnel policies of the Office of 
Personnel Management (OPM) and Department of Defense 
may not be authorized permanent or temporary access to 
SIOP-ESI unless they meet the basic eligibility 
criteria set forth below : 

(a) (U) The individual shall be a US citizen. 

(b) (U) The individual shall have a f inal TOP 
SECRET clearance granted in accordance with the 
policy and criteria prescribed in DOD 5200. 2-R. 

(c) (U) The individual shall have been the subject 
of a pompleted special background investigation 

( SBI ) that meets the criteria set forth in DOD 
5200. 2-R or other types of background 
investigations listed in DOD 5200. 2-R that are 
equivalent to an SBI, 
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Access for these individuals must be essential to the 
performance of their assigned duties and justified by 
their direct involvement in the review, development, 
maintenance, or implementation of the SIOP. 

(4) (U) Those personnel previously granted. access to 
SIOP-ESI based upon a background investigation (BI) 
that did not contain all of the elements of an SBI as 
set forth in DOD 5200. 2-R shall be the subject of an 
SBI when a reinvestigation is requested for any reason, 
such as the development of adverse or questionable 
information or when a break in the period of access or 
Federal service exceeds 12 months. 

(5) (U) Waiver of Access Criteria . When justified by 
compelling need; 

(a) (U) A waiver of the basic eligibility 
requirement stated in subparagraph 8b(3)(b) above 
may be authorized by those access-granting 
authorities listed in subparagraphs 8c(l) through 
8c(5) below for military personnel and civilian 
personnel subject to 0PM and DOD personnel 
policies. This authority may not be delegated. 
Waivers should be approved only if the individual 
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concerned meets all the following criteria: <1 

1. (U) Is being assigned to a position for 2 

which permanent access to SIOP-ESI is required. 3 

2. (U) Already possesses an interim TOP SECRET 4 

clearance granted in accordance with the policy 5 

and criteria prescribed in DOD 5200. 2-R. 5 

2. (U) Has been administered a screening 7 

interview equivalent to that which is used to 8 

screen nominees for access to Sensitive 9 

Compar tmented Information (SCI). 10 

4.. (U) Has an SBI initiated. 11 

(b) (U) A waiver of the basic eligibility 12 

requirement stated in subparagraph 8b(3)(c) above 13 

may be authorized for military personnel and 14 

civilian personnel subject to 0PM and DOD personnel 15 

policies. Such waivers must be approved by flag IB 

officer-level, access-granting authorities as 17 

authorized in subparagraphs 8c and 8d below. In 18 

cases where a flag officer is not routinely 19 

available to the unit and delays in processing will 20 

result in unacceptable operational delays in 21 

assigning personnel to SlOP-related duties, this 22 

authority may be delegated in writing to 0-6 level 
operational unit commanders (i.e. Submarine 
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Squadron Cotrmianders , Wing commanders, or ^ 

equivalent). To be granted a waiver, the 2 

individual concerned must meet all of the following 3 

criteria: 4 

1. (U) Is being assigned to a position for 5 

which permanent access to SIOP-ESI is required. 6 

2. (U) Already possesses a final TOP SECRET 7 

clearance that was based on a standard BI that 8 

meets the investigative standards of 9 

paragraph 2, Appendix B, DOD 5200, 2-R. 10 

1. (U) Has an SBI initiated. 11 

(c) (U) Approval of waivers for contractor 12 

personnel will be made only by the Chairman, Joint 13 

Chiefs of Staff. 14 

( 6 ) (U) Flag-officer level, access-granting 15 

authorities, as authorized in subparagraphs 8 c and 8 d 16 

below, may approve temporary access to SIOP-ESI 17 

information for briefings, working meetings, etc., for 18 

personnel who do not have a completed SBI as required 19 

by subparagraph 8 b{ 2 ), provided all of the following 20 

criteria are met: 21 

(a) (U) Access is essential to the performance of 22 

duty and the individual is directly involved in the 
review, development, maintenance, or implementation 
of the SIOP. 
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(b) (U) The individual meets the other basic 1 
eligibility criteria specified in subparagraphs 2 
8b(3)(a) and 8b(3)(b) above. 3 

(c) (U) The individual is subject to military, 0PM, 4 
or DOD personnel policies. 5 

(7) (U) Civilian personnel not subject to provisions of 6 
0PM or DOD personnel policies (i.e., contractor 7 
personnel) will not normally be granted access to 8 
SIOP-ESI. Such civilian personnel shall not be granted g 
permanent access to SIOP-ESI but may be granted 10 
temporary access for periods not to exceed 1 year. 11 
Requests for temporary access for such civilian 12 
personnel shall be referred to the Director, Joint 13 
Staff, for appropriate action. Personnel in this 14 
category for whom temporary access is approved shall 15 
possess a final TOP SECRET clearance and shall meet the I5 
basic security eligibility requirements of DOD 17 
Instruction 5220.28. 18 

(8) (U) Prior to being granted permanent access, all 19 
personnel will be briefed on the contents of this 20 
directive and any supplemental directives considered 21 
appropriate. Once granted, continued access by 22 
individuals will be based on security assurance 

measures established by the granting authority. Upon 
termination of access, appropriate debriefing must be 
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UNCLASSIFIED 

[u) accomplished. These briefings will emphasize the 
individual's continuing responsibility for the 
protection of information obtained as a result of his 
access. To satisfy these requirements, each individual 
who is granted permanent SIOP-ESI access will execute 
an appropriate briefing/debriefing certificate, which 
will be maintained for a minimum of 1 year after the 
debriefing of an individual by the command granting 
access. These same requirements apply to personnel 
granted temporary access to SIOP-ESI, except as noted 
in subparagraph 12h below. 

S-h' (9) (U) OJCS, Services, unified and specified commands, 

I Defense agencies, and JSTPS will: 

(a) (U) Develop procedures to maintain, at an 
appropriate level, SIOP-ESI access listings of 
personnel categorized by military, DOD civilian, 
and industrial contractor personnel. These 
listings will be current as of the last day of each 
quarter and will contain, at a minimum: billet 

number, name, rank/grade, social security number 
(SSN), office/activity/unit designator, category of 
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accessr travel/duty restrictions (if applicable)# 
and authorization document. Annex B is an example 
of a personnel access roster. Such lists shall be 
marked: "Subject to the Privacy Act of 1974 (5 

use# Section 552a).'* 

(b) (U) Be prepared to provide a numerical count of 
personnel having SIOP-ESI access within 5 working 
days after request, in the categories specified in 
subparagraph 8b(9)(a) above# to the Directorate for 
Information and Resource Management# OdCS# ATTN: 
Security Division. In any case# such a numerical 
report will be provided by 31 January of each 
calendar year. Close-out date for the report will 
be 31 December of the preceding year. To preclude 
duplication in recording, the following 
instructions apply: 

1. (U) Services will record all personnel not 
assigned to the OJCS# Defense agencies, or to 
the staffs of unified and specified commands. 

2. (U) Unified commands will record assigned 
headquarters personnel only. 

3. (U) US Element NORAD and the specified 
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{(;) commands (US Space Command, MAC, and SAC) will 
divide personnel into two categories: 
headquarters and all others. 

4. (U) JSTPS will record single-status and 
Scientific Advisory Group personnel. 

5. (U) Guidance for recording of personnel in 
OSD, OJCS, non-DOD agencies, and the Defense 
agencies will be provided by a Joint 
Administrative Instruction. 

(10) (U) The categories of SIOP-ESI listed in Annex A 
shall be used for access control. 

(11) (U) Internal inspection procedures will give 
special and continuing attention to safeguards for 
SIOP-ESI. 

c. (U) Authority to establish billets and grant access to 
SIOP-ESI is delegated to : 

(1) (U) The Director, Joint Staff, for civilian 
personnel of the White House, members of the Senate and 
House of Representatives, and their staffs. Requests 
must be submitted to the Director a minimum of 7 work 
days prior to the date the access is required. 

(2) (U) The Director, Joint Staff, for the Joint Chiefs 
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of staff, members of the OJCS, other Joint Staff 
agencies. Defense agencies, military personnel assigned 
to the White House and National Security Council 
Staffs, OSD, civilian personnel not subject to the 
provisions of 0PM or DOD policies (i.e., contractor 
personnel), and others as may be authorized by the 
Joint Chiefs of Staff. These requests must be 
submitted to the Director for Operations, Joint Staff, 
a minimum of 7 work days prior to the date the access 
is required. 

(3) (U) The Chief of Staff, US Army; the Chief of Naval 
Operations; the Chief of Staff, US Air Force; and the 
Commandant of the Marine Corps for members of their 
respective Services and departmental staffs, and 
personnel assigned to the offices of the Secretaries of 


the Military Departments, 

(4) (U) Commanders of unified and specified commands 
having responsibility for planning, preparation, 
coordination, and execution of the STOP, for members of 
their staffs and subordinate command, and military 
personnel assigned to agencies directly supporting the 
CINC's SlOP-related missions. 
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(5) (U) The Director of Strategic Target Planning for 
members of the JSTPS. 

d. (U) Access to SIOP data, including SIOP-ESI, normally 
shall not be given to foreign nationals, including members 
of NATO, except as authorized by the Joint Chiefs of 
Staff. Procedures for access to US SIOP data released to 
NATO in accordance with subparagraph 6f above are 
contained in Annex B to Attachment 1 of USSAN Instruction 
1069 (DOD 5100.55, Enclosure 2). Access to SIOP-ESI data 
by US personnel assigned to NATO military organizations/ 
agencies normally will be restricted to those sanitized 
data allowed to be provided under the provisions of MJCS 
273-83. US personnel assigned to NATO military 
organizations/agencies who are also members of USEUCOM or 
LANTCOM may be authorized access to other SIOP-ESI by 
USCINCEUR or USCINCLANT, US personnel assigned to NATO 
military organizations/agencies who are not also members 
of USEUCOM or LANTCOM may be authorized access to other 
SIOP-ESI by USCINCEUR. 

e. (U) The authority to grant access delegated in sub- 
paragraph 8c above may be further delegated to 
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(^3 appropriate subordinates. Such further delegation shall 
be held at the highest rank and restricted to the minimuin 
number of appropriately cleared individuals, consistent 
with operational requirements. 

f. (U) Requests for SIOP-ESI access not covered above will 
be submitted to the Director for Operations, Joint Staff, 
who will forward the request and his recommendations to the 
Director, Joint Staff. The Director, Joint Staff, 
consulting the Chairman, Joint Chiefs Staff, as 
appropriate, will approve/disapprove these requests. 

9. (U) Travel: Persons granted access to SIOP-ESI incur a 

special security obligation and must be aware of the risks 
associated with travel to or through hostile countries. 
SIOP-ESI-cleared personnel must be warned of the risks 
associated with capture, interrogations, harassment, 
entrapment, or exploitation by hostile nations or groups. 
Hazardous activities comprise assignments, visits to, travel 
through, and use of vessels owned or controlled by hostile 
countries, as well as assignment or travel in combat zones or 
other areas where hostilities or terrorist activities are 
taking place, duties behind hostile lines, and duties or 
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travel in isolated or exposed areas where individuals cannot 
reasonably be protected against hostile action. Individuals 
also must be advised of the potential for terrorism and the 
active and passive measures to avoid becoming a target or 
inadvertent victim of a terrorist act. 

a. (U) Official Travel ; All SIOP-ESI cleared personnel 
performing official travel outside the United States must 
receive a securi ty/anti -terror ist briefing and or risk of 
capture briefing. 

b. (U) Unofficial Travel : All S lOP-ESI-cleared personnel 

performing unofficial travel to or through hostile 
countries must comply with the provisions below. Failure 
to comply with these provisions may result in the 
withdrawal of approval for continued access to SIOP-ESI. 

(1) (U) Give advance notice of such planned travel to 
local security officer. 

(2) (U) Obtain anti-terrorism briefing from the 
security officer prior to performing such travel. 

(3) (U) Immediately contact the nearest US Consul, 
Attache, or Embassy Regional Security Officer or Post 
Duty Officer if detained or subjected to significant 


1 

2 

3 

£ 

5 

6 

7 

8 
9 

11 

ii 

13 

14 

ii 

11 

18 

19 

21 

22 


35 


Appendix 



UNCLASSIFIED 

uiicnirr 


harassment or provocation while traveling. 

(4) (U) Report to the specified official upon return 
from travel any unusual incidents, including incidents 
of potential security concern, encountered during such 
travel. 

c. (U) SlOP-cleared individuals whose access is being 
terminated will be officially reminded of their continuing 
obligation to protect SIOP-ESI and will be informed of the 
risks associated with hazardous activities. After SIOP- 
ESI access is terminated, provisions of paragraph b no 
longer apply. 

10. (U) Visits Requiring Access to SIOP-ESI . Prior to visits 
by personnel who will require access to SIOP-ESI data, the 
headquarters to be visited will be notified of the category 
of SIOP-ESI to which each individual is authorized access. 
This certification is in addition to the requirement to 
certify appropriate security clearances. 

11. (U) Visits to JSTPS 

a. (U) Requests for visits to JSTPS by civilian personnel 
of the White House, members of Congress, and Congressional 
Staff members will be submitted to and be reviewed and 
approved by the Director, Joint Staff. 
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QyJ All other requests for visits, except working level, will 
be sent to the Director for Operations, Joint Staff, for 
approval. The Director for Operations, Joint Staff, will 
approve/disapprove or forward as appropriate to the 
Director, Joint Staff, visit requests for individuals 
possessing appropriate clearances and a valid need-to- 
know. 

//, b. (U) All requests for visits should be submitted a 

minimum of 7 working days prior to the visit. The timely 
submission of requests is necessary to provide sufficient 
time for adequate staffing within the Joint Staff. 
Requests should contain a detailed justification for the 
visit, type of information/briefing requested, point of 
contact at JSTPS, and recommendations on the appropriate 
type/classification of briefing to be given, 
c. (U) Members of the Service or CINC staffs who are 
directly involved with SIOP development/support /implemen- 
tation should contact the Joint Secretariat, JSTPS, 
directly for working-level visit approval. Other 
individuals from outside agencies possessing appropriate 
SIOP clearances who wish to visit JSTPS for working-level 
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meetings need only to notify J-3# Strategic Operations 
Division, of visit intentions. 

12. (U) Slop Briefings 

a. (U) Slop briefings may be given to those personnel 
under the control or military jurisdiction of the Joint 
Chiefs of Staff or of the Chief of Staff, US Army; the 
Chief of Naval Operations; the Chief of Staff, US Air 
Force; or the Commandant of the Marine Corps. Access for 
these individuals must be essential to the performance of 
their assigned duties and justified by their direct 
involvement in the review, development, maintenance, or 
implementation of the SIOP. Personnel who do not fall 
into this category require specific approval as indicated 
below. 

b. (U) The SIOP shall not be used as a vehicle of 
instruction at joint or Service schools or other similar 
instructional institutions. Special SIOP briefings given 
to joint or Service schools shall not contain SIOP-ESI and 
will be classified TOP SECRET. Attendance of foreign 
personnel at these briefings is prohibited. SIOP 
briefings for the joint colleges may be scheduled and 
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conducted on a mutually acceptable basis through direct 
coordination between DSTP and the cognizant commandant. 

The Chiefs of the Services will provide approval of such 
requests from Service schools over which they exercise 
cognizance . 

c. (U) SIOP briefings normally shall not be given to 
foreign nationals, including members of NATO. The 
Director, Joint Staff, may approve briefings for military 
members of NATO, provided the briefing is sanitized in 
accordance with MJCS 273-83 , Other requests for SIOP 
briefings for foreign nationals may be approved by the 
Joint Chiefs of Staff. 

d. (U) The Chairman, Joint Chiefs of Staff, consulting the 
other Joint Chiefs of Staff, as appropriate, will approve/ 
disapprove requests for SIOP briefings for civilian 
personnel of the White House and members of the Senate and 
House of Representatives. 

e. (U) Briefings on the SIOP Revision Report and War Games 
Report or briefings based on these reports may not be 
given except as provided in the foregoing subparagraphs or 
as approved in accordance with the provisions of JCS MOP 
39 and this directive, as appropriate. 
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5 . f. (U) Requests for SIOP briefings not covered above will 
be submitted to the Director for Operations, Joint Staff, 
who will forward the request and his recommendations to 
the Director, Joint Staff. The Director, Joint Staff, 
consulting the Chairman, Joint Chiefs of Staff, as appro- 
priate, will approve/disapprove these requests. 

g. (u) An approved attendance list will be prepared to 
control entry to SIOP briefings containing SIOP-ESI. 

h. (U) Persons attending SIOP briefings containing SIOP- 

ESI must meet the criteria for eligibility for access to 
SIOP-ESI as specified in subparagraphs 8b(3), (5), and (6) 

above. Persons granted temporary access to SIOP-ESI to 
attend a briefing need not complete a briefing/debriefing 
certificate as required by subparagraph 8b{8) above, 
provided the briefing contains appropriate oral and visual 
warning regarding the sensitivity of the data in the 
briefing. 

13. (U) Training. It is recognized that operational commands 

must conduct SIOP training in order to accomplish their stra- 
tegic operational missions effectively. In this context, 

SIOP indoctrination is required by many operational 
personnel . 
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The policy guidelines for SIOP indoctrination are as follows: 1 

a. (U) Access shall be strictly controlled on a need-to- ^ 

know basis. 1 . 

b. (U) Attendance at indoctrination briefings will be £ 

restricted to those personnel actually assigned to or 5^ 

en route to operational billets that require access to 6 

SIOP information. Z 

c. (U) Indoctrination courses may be conducted at opera- £ 

tional commands that hold SIOP documents or at those £ 

appropriate training facilities that are under the direct 10^ 

supervision/control of the component commanders of the 
several unified and specified commands. Curricula and 1£ 

associated material shall be approved by these commanders. H 

d. (U) The SIOP may be used as a vehicle of instruction 

provided that the precise area of indoctrination is 
correlated with billet requirements. 11 

14. (U) Telecommunications System Processing of SIOP-ESI 17 

a. (U) Special Category (SPECAT) SIOP-ESI Special Handling i£ 
Designator. To preclude delivery of SIOP-ESI message 
traffic to a SPECAT terminal that is not specifically il 

approved to receive SIOP-ESI messages, communications Z1 
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systems shall apply a special handling designator in the 
security field of the communications heading of all 
electrically transmitted SIOP-ESI messages to enable 
automatic switch comparison of the SIOP-ESI designator 
against the destination security level authorization. A 
designator indicating SIOP-ESI has been established and is 
promulgated in AGP 121 US Supp-1 (Series). Message 
originators must include this designator in ail SIOP-ESI 
messages (see paragraph 5d). Commanders having 
responsibility for terminals authorized to receive SPECAT 
(less SIOP-ESI) messages will ensure that adequate 
debriefing procedures are established in the event of 
inadvertent delivery of a SIOP-ESI message to the terminal 
affected, 

D. (U) Connection of an ADP System that Processe s SIOP-ESI 
to a Telecommunications System . An ADP system processing 
SIOP-ESI in accordance with the provisions of Annex C may 
be connected to telecommunications systems such as AUTODIN 
or other nondedicated telecommunications systems only when 
approved by the Joint Chiefs of Staff. Requests for 
approval to make such connections should be forwarded to 
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the Director for operations# Joint Staff# OJCSi Requests ^ 
should address as a minimum: ^ 

(1) (UJ The procedures to be followed to ensure the ^ 

safeguarding of SIOP-ESI. £ 

(2) (U) Interface design features that will ensure the 5 

safeguarding of SIOP-ESI. £ 

(3) (U) The results of evaluations of the interface ^ 

design, £ 

(4) (U) The results of tests of the interface. £ 

(5) (U) Security findings and remaining vulnerabilities 10^ 
of security concern. 

( 6 ) (U) How reapproval will be handled if significant 12 ^ 
interface redesign is required in the future. 

(7) (U) Conclusions and recommendations regarding 1£ 

security and the use of the interface to interconnect 

the ADP system to a telecommunications system. 1£ 

c. (u) Accreditation of Telecommunications Systems To 17 

Process SIOP-ESI . ii 

(1) (U) Telecommunications systems such as AUTODIN may 1£ 

process and transmit SIOP-ESI data only after the ^ 

system has been accredited by the Joint Cniefs of £1 

22 
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staff. Requests to accredit telecommunications systems 
to handle SIOP-ESI should be addressed to the Director 
for Operations, Joint Staff, OJCS. Requests for 
accreditation should include details regarding imple- 
mentation of a security certif ication/accreditation 
plan and adhere to guidance outlined in: Defense 

Intelligence Agency Manuals (DIAM) 50-3, "Physical 
Security Standards for Sensitive Compartmented 
Information Facilities"; DIAM 50-4, "Security of 
Compartmented Computer Operations;" and DIAM 50-5, 
"Sensitive Compartmented Information Contractor 
Administration Security." Upon development of the 
Security Certification/Accreditation Plan, it should be 
submitted to the Director for Operations, Joint Staff, 
OJCS, for review and comment by OJCS personnel. The 
plan will outline the procedures to be followed to 
ensure the safeguarding of SIOP-ESI. The plan should 
address how information security will be achieved at 
the outset and how reaccreditation will^be achieved 
whenever significant portions of system hardware or 
software are changed. The plan will also address the 
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protective features outlined in subparagraph 5g(9) of ^ 

Annex C. A suggested outline of the plan's contents is ^ 

as follows: 2 

(a) (U) Introduction - includes brief description ^ 

of system, purpose, and scope of plan, ^ 

(b) (U) Responsibilities - identifies agencies par- ^ 

ticipating in certification and accreditation ^ 

activity and their roles and responsibilities, ^ 

(c) (U) System Overview - includes a functional ^ 

description of the system with appropriate 
definitions of system components, interfaces, etc. 
Additionally, should address security concept, ^2 

operational concept, maintenance concept, and 
procurement process. 14 

(d) (U) Security Problem - identifies potential 

system security weaknesses. Ig 

(e) (U) Security Approach - describes computer 

security features and communications security 
considerations. 19 

(f) Security Activities - describes actions and 20 

features implemented to ensure security. 21 

22 
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(g) (u) Description of the Accommodation Package - 
describes documents comprising recommendation 
package to include the security certification 
evaluation . 

(2) (U) Upon completion of system security activities, 
the final accreditation/certification request should be 
submitted for approval. The request should be 
accompanied by a security certification evaluation 
which addresses the following as a minimum; 

(a) (U) System security design and mode of 
operation . 

(b) (U) System security tests conducted. 

(c) (U) Security findings and remaining 
vulnerabilities . 

(d) (U) Conclusions and recommendations regarding 
security . 

15. (U) Transportation of SIOP-ESI Material 

a. (U) SIOP-ESI material not electrically transmitted via 
secured circuits shall be dispatched only by courier. The 
Armed Forces Courier Service (ARFCOS) should be utilized 
to the maximum extent feasible. Special handling 
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instructions within the ARFCOS system will be as 
prescribed by the Director, ARFCOS. Dispatching officials 
vy i 1 designate the material SIOP— ESI when entering it into 
the ARFCOS system and will have the following statement 
affixed to the outside of the package or container in 
addition to the normal addresses and markings: 

'•RESTRICTED HANDLING REQUIRED" 

(1) (U) Air transportation of this package will be in 

the following priority: military aircraft, regularly 

scheduled US commercial cargo aircraft, government- 
chartered commercial aircraft, regularly scheduled US 
commercial passenger aircraft (ARFCOS only). 

(2) (U) TWO COURIERS ARE REQUIRED BETWEEN US MILITARY 
INSTALLATIONS/FACILITIES. ONE COURIER CAN BE USED 
DURING FLIGHT SO LONG AS TWO COURIERS DELIVER AND PICK 
UP MATERIAL AT PLANES IDE OFF MILITARY BASES. 

(3) (U) When not attended by qualified couriers, the 
minimum security required for storage of this package 
is in a secure room supplemented by guards or an 
intrusion detection alarm system or a Class A vault 
constructed in accordance with individual Service 
directives . 
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(4) (U) COURIERS AND GUARDS MUST POSSESS TOP SECRET 

CLEARANCES BASED ON A COMPLETED BACKGROUND 
INVESTIGATION. 

b. (U) Commanders supporting ARFCOS are responsible for 
providing arrangements for the transportation of SIOP-ESI 
material by military air. Priority will be provided to 
the shipment of SIOP-ESI material to meet the deadline 
delivery date. 

c. (U) When not transported via ARFCOS, SIOP-ESI material 
being transported or processed outside military 
installations/facilities will be accompanied by two 
appropriately cleared couriers (in accordance with the 
handling restrictions delineated in subparagraph 15b 
above) assigned the primary responsibility for 
surveillance and security of the material. When utilizing 
authorized air transportation, as delineated in 
subparagraph 15c(i) and (2) below, one courier may be used 
during flight so long as two couriers are used to 
transport the SIOP-ESI material to and from the aircraft 
and to maintain surveillance until the aircraft is 
airborne . 

(1) (U) The following types of air transportation are 

authorized for movement of SIOP— ESI material: 
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(a) (U) Military aircraft. 

(b) (U) US contract commercial aircraft when the 
manifest is under US military control. 

(c) (U) US commercial nonpassenger cargo aircraft, 

(2) (U) SIOP-ESl material WILL NOT be transported by 
any of the following means: 

(a) (U) Commercial passenger aircraft (except for 
ARFCOS, as described above). 

(b) (U) Department of State Diplomatic Courier 
Service . 

(c) (U) Foreign or combined courier service (such 
as NATO) . 

(3) (U) Ground transportation of SIOP-ESI material will 
be, in order of priority, by US Government sedan, US 
Government bus, US Government chartered bus, commercial 
transportation . 

16. (U) Actions in Case of Possible or Actual Compromise . 

The Joint Chiefs of Staff and the DSTP shall be informed by 
the most expeditious means available, consistent with 
security requirements, of any compromise or suspected 
compromise of any portion of any SIOP material. Such reports 
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will include specific identification of the document» whether 
or not SIOP-ESI is involved, and an opinion as to probability 
or possibility of compromise. The DSTP will recommend, 
appropriate actions required with regard to modification of 
tlie plan or related procedures as a result of the actual or 
possible compromise for consideration by the Joint Chiefs of 
Staff. The provisions of Chapter VI, DOD 5200. 1-R also 
apply. 

17 , (U) Machine Reproduction of SIOP-ESI . The capability of 

data reproduction by electronic means presents a special need 
for attention to security precautions where such means are 
used in processing classified material. The need is more 
pressing in instances where distribution and access must be 
strictly controlled, as in the case of SIOP-ESI material. 
Commands and agencies that possess the means for machine 
reproduction of SIOP-ESI material, or which are authorized to 
release such materials to other agencies for similar 
reproduction, shall establish suitable and adequate means for 
accounting for and controlling access to SIOP-ESI. In every 
case, such means shall ensure that numbers of copies, 
extracts, or information derivatives are limited to those 
required to serve valid needs. Access to documents and 
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reproduction equipment shall be limited to the minimum 
numbers of properly cleared personnel. Accountability 
systems shall ensure that all documents produced by 
electronic means, including ADP systems, are properly 
identified, marked, distributed, and safeguarded. 

18. (U) ADP 

a. (U) Safeguarding SIOP-ESI in an ADP environment 
requires special precautions achieved by using a 
combination of conventional security procedures and new 
automated techniques. Annex C delineates the minimum 
security requirements for ADP systems. ADP systems 
security should include the following: 

(1) (U) ADP hardware features. 

(2) (U) ADP software features. 

(3) (U) Communications security. 

(4) (U) Emanations security. 

(5) (U) Physical security measures. 

(6) (U) Personnel security measures. 

(7) (U) Procedural safeguards (management, adminis- 
trative, and operational procedures). 

b. (U) Recording media used to store or process SIOP-ESI 
must retain the TOP SECRET classification and be 
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controlled as SIOP-ESI until one of the declassification - 
procedures delineated in Annex D is carried out. The 
declassification procedures in Annex D apply to release of 
the recording media for maintenance of equipment, return 
of parts to contractor, and release of computers to ^ 

contractors. 6 

c. (U) The provisions of Annexes C and D may differ from Z 
the requirements of communications security (COMSEC) Z 

materials and information. Refer to appropriate COMSEC Z 

directives for security requirements and declassification iZ 
procedures for COMSEC items when COMSEC and SIOP-ESI are ii 
being processed. 12 

19. (U) Destruction . As a matter of policy, in order to 
ensure control and minimize the possibility of compromise, — 

Slop material will be destroyed promptly when superseded by — 

new editions or when no longer required for operational use. — 
Archive copies are authorized to be established by JSTPS, as — 
prescribed by the Joint Chiefs of Staff. Officials — 

certifying and witnessing the destruction of material — 

containing SIOP-ESI must have authorization for access to the — 
category(ies) of SIOP-ESI contained in the material being — 

destroyed. 22 
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ANNEX A 

CATEGORIES OF SIOP-EXTREMELY SENSITIVE 
INFORMATION (SIOP-ESI) (U) 

1. (U) Scrupulous discrimination must be used when granting 
access to Categories 01, 02 , 04, 09, and 10. Use of one, or 
more, of Category 03, 05, 06, 07, or 08 is preferable to 
granting access to Category 01, 02, 04, 09, or 10. Access 
categories are not meant to be a list of greater or lesser 
sensitivity or exposure; they are meant to be subject 
restrictive. The categories are intended to limit access to 
the specific area of duty responsibility. Personnel granted 
permanent or temporary access to SIOP-ESI need no further 
authorization for access to the specific categories of SIOP- 
ESI specified for a billet; however, holders of SIOP-ESI 
information must still verify a valid need— to-know before 
releasing SIOP-ESI. 

2. (U) Category numbers are unclassified. When associated 
with their definitions, they are CONFIDENTIAL. 


CLASSIFIED BY DIRECTOR, J-3 
DECLASSIFY ON OADR 
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UNCLASSIFIED 


ANNEX C 

MINIMUM SECURITY REQUIREMENTS FOR AUTOMATIC DATA 
PROCESSING SYSTEMS PROCESSING SI OP- EXTREMELY 
SENSITIVE INFORMATION (SIOP-ESI) 


1. An Automatic Data Processing System (ADPS) is defined in 
DOD Directive 7920.1 as an interacting assembly of 
procedures, processes, methods, personnel, communications, 
and automatic data processing equipment to perform a series 
of data processing operations — a combination of automatic 
data processing resources and automated data systems. This 
definition is interpreted as including all peripheral devices 
used in performing data processing operations located within 
or remote to the central ADPS facility. 

2. Authorities listed in subparagraphs 8c(l) through 8c(5) of 
the Appendix may approve the processing of data containing 
SIOP-ESI on an ADPS when operations are controlled as 
indicated below. 

a. The preferred mode of operation is the Dedicated 

Security Mode as defined by paragraph 1-211, DOD 5200. 28-M. 


"All portions of this annex are UNCLASSIFIED" 
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b. In exceptional cases where the Dedicated Security Mode 
of Operations is not reasonably practicable, the 

System High Security Mode as defined by paragraph 1-227, 
DOD 5200. 28-M may be used. 

c. Regardless of whether the Dedicated Security Mode or 
the System High Security Mode is used, the ADPS including 
all of its connected peripheral devices and remote 
terminals, must be dedicated to the processing of SIOP- 
related and/or SIOP-ESI and be under the exclusive control 
of persons who are authorized access to SIOP-ESI. 

d. All peripheral devices in areas not manned by personnel 
cleared for SIOP-ESI must be disconnected from the ADPS by 
either a manually thrown switch or by unplugging at a 
patch panel. 

3. Efficient utilization of the ADPS is important but should 
not be used as a criterion for determining the need-to-know 
and access to SIOP-ESI. 

4. Appropriate procedures will be established for debriefing 
persons not authorized access to SIOP-ESI should inadvertent 
disclosures of SIOP-ESI occur while processing under the 
modes of operation delineated in subparagraphs 2a and 2b 
above. Paragraph 16 of the Appendix will only apply in the 
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case of possible or actual compromise. 

5. Requirements for ADPS containing SIOP-ESI are stated 
below: 


1 


a. ADPS Security Officer . A Security Officer properly 
cleared for access to SIOP-ESI will be appointed for each 
ADPS that will process data bases containing SIOP-ESI. 

The designated approving authority (DAA) for commands 
having operational responsibility for the ADPS will ensure 
such appointment. The responsibilities of the ADPS 
Security Officer will include: 

(1) Ensuring that each site has written procedures that 
outline operator actions required for known fault/ 
security events. These procedures should include 
operating restrictions, if required, and delineate 
reporting and investigation requirements. 

(2) Ensuring continued compliance with all requirements 
for processing and storing data containing SIOP-ESI 
including the requirements of this directive. 

(3) Ensuring that security deficiencies that occur in 
the operation of the ADPS are expeditiously reported to 
the command DAA. 

(4) Curtailing system processing, pending investigation 
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whon coritlnueil •■jpecQtion coul'3 1.6<^d to compromise. 

(5) Conducting a review of audit trails for security- 
related activities. 

Command DAAs will immediately forward to the Director for 
Operations, Joint Staff, all security deficiencies they 
consider significant and will forward annual certification 
that the system complies with all requirements for 
processing and storing data containing SIOP-ESI. If 
systems do not comply with all requirements for processing 
and storing data containing SIOP-ESI, command DAAs will 
list deficiencies and proposed corrective actions in their 
annual reports. 

b. Personnel Security and Access Control Measures 

(1) Unescorted access to any portion of the ADPS 
processing SIOP-ESI will be limited to personnel 
authorized access to SIOP-ESI. All other personnel 
requiring access to such areas must be escorted by 
personnel authorized access to SIOP-ESI. The area will 
be inspected prior to such visits to ensure that no 
SIOP-ESI is visible. Escorts are responsible for 
ensuring that no disclosure of SIOP-ESI occurs. 

(2) A personnel access control system will be 
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maintained at the central site and at the remote 
terminal areas to permit ready identification of those 
persons authorized access to the ADPS. 

(3) A record will be maintained of all persons that are 
escorted into the areas identified in subparagraph 
5b(l) above. The ADPS Security Officer will ensure 
that this record is retained for a minimum of 12 months 
from the date of the last entry in the log. 

c. Physical Security Protection . Physical security will 
be in accordance with DOD Directive 5200.1, DOD Regulation 
5200. 1-R, DOD Directive 5200.28, and DOD Manual 5200. 28-M. 

d. Communications Links . All communications links will be 
secured in accordance with DOD Directive C-5200.5 for the 
classification of information transmitted. When 
connection is approved by the Joint Chiefs of Staff (see 
subparagraph 14b of the Appendix) and is connected in 
accordance with subparagraph 5g(9) of this annex, and ADPS 
that processes data containing SIOP-ESI may be conducted 
to nondedicated telecommunications systems that have been 
accredited for the transmission of SIOP-ESI (see 
subparagraph 14c of the Appendix). 

e. Emanations Security. All equipment associated with an 
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ADPS/ including remote terminals# modems# multiplexers# 
cjfypto devices# patcVi panel# etc. # tliat is used to process 
data containing SIOP-ESI must meet the objectives of DOD 
Directive S-5200.19. ADPS equipment processing SIOP-ESI, 
and not previously TEMPEST tested# will be tested and 
evaluated at the earliest possible date. If the ADPS 
equipment is found to be deficient# appropriate counter- 
measures will be implemented immediately and a plan will 
be developed to phase in equipment that will meet TEMPEST 
standards at the earliest possible date. 

e. Security Classification Responsibilities . The user is 
responsible for verifying that no extraneous data are 
included in his output product and that the. security 
classification indicated on the product is consistent with 
the data contained therein. He is also responsible for 
reporting all discrepancies. 

g. Software/Hardware Controls . The following features 
will be implemented in each ADPS that is to be used to 
process data containing SIOP-ESI. Special controls will 
be implemented governing access to# and modifications of# 
these features. Where implementation of the following 
features is not feasible because of equipment configuration 
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or other legitimate reason# other compensating controls 
will be developed and approved for implementation by 
command DAA. 

( 1 ) Security Markings and Special Access Labels 

(a) All printed material produced from ADPS 
containing SIOP-ESI and operating in accordance 
with paragraph 2 above will have machine-produced 
security markings and special access labels at the 
top and bottom of each page equivalent to the 
highest classification of the data contained in the 
product. In addition, the front covers will be 
marked with a SAFEGUARD statement (see Tab). 

(b) Removable storage media; i.e., tapes, card 
decks, discs, and similar devices used to store 
data bases containing SIOP-ESI will contain TOP 
SECRET classification markings in accordance with 
DOD 5200. 1-R, with the SIOP-ESI label appropriately 
affixed to the storage media. These security 
markings/labels will be retained until the device 
is declassified by approved procedures described in 
Annex D. 
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(2) User Identification/Authentication . Operation of 
the ADPS will include a mechanism that identifies and 
authenticates user personnel accessing it remotely. 

This mechanism will consist of software and/or hardware 
devices, manual control procedures at terminal sites, 
or other appropriate measures designed to validate the 
identity and access authority of system users. 

(3) Memory Protection . System hardware and software 
features will exercise control over the addresses to 
which a user program has access. 

(4) Separation of User/Executive Modes of Operation , 

Tlie user and executive modes of an ADPS will be 
separated so that a program operating in user mode is 
prevented from performing unauthorized executive 
functions. Controls will be implemented to maintain 
continued separation of these modes. 

(5) Memory Residue Clean-Out . Measures will be 
implemented to ensure that memory residue from 
terminated user programs is made inaccessible to other 
users. Tliis will be accomplished as required by DOD 
5200. 28-M. 
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( 6 ) Access Control . Effective controls will be 1 

iiTiplemented to limit user and terminal access to 2 

authorized information and programs as well as to 2 

control read and/or write capability. In addition to 2 

software# positive disconnection of hardware can also 5 

be used to control remote terminals. Each individual £ 

user of the system will have a unique unclassified user 7 

identification (ID) assigned. Access attempts from 2 

remote terminals will be limited to TWO attempts, after 9 
which the terminal will automatically be locked-out and LO 
the ADP Security Officer notified. 2L 

( 7 ) Audit Trail Capability . Each ADPS will produce an 1^ 

audit trail as defined in DOD 5200. 28-M containing 1^ 

sufficient information to permit a regular security 

review of system activity. Audit trail information iS 

will be controlled closely by the ADPS Security Officer ^ 

and, since SIOP-ESI may be contained therein, should be L7 
marked and handled as SIOP-ESI until actual classifica- 
tion is determined. i 2 . 

( 8 ) Changing into and out of SIOP-ESI Operations 20 

(a) Before starting to process SIOP-ESI, the area 2 ^ 
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must be cleared of all unauthorized personnel and 1 

unauthorized peripheral devices must be 2 

disconnected. The point of disconnect must be under 3 
the control of personnel cleared for SIOP-ESI. 4 

(b) After processing is completed, all removable 5 

storage media containing files and/or programs used 5 
during SIOP-ESI processing will be disconnected 7 

from the ADPS . If any SlOP-related files or g 

programs were used and those files or programs are 9 
to be used in a non-SIOP-ESI processing environment, ^ 
they must contain no SIOP-ESI or must be purged of ^ 
any SIOP-ESI prior to such use. All nonremovable ^ 

storage media and memory must be cleared of all ^ 

SIOP-ESI. Erase and overwrite procedures ^ 

delineated in Annex D apply if the ADPS is to be ^ 

used in an unclassified mode. ^ 

( 9 ) Communication Connectivity . If an ADPS that has ^ 

been approved for processing SIOP-ESI is also approved 18 
for interface with an external telecommunications ^ 

system, such as AUTODIN or other telecommunication ^ 

systems, while processing SIOP-ESI, the following 2 1 
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additional protective features are required: ^ 

(a) Ail interfacing telecommunications channels ^ 

will be protected by cryptographic equipment or . 3 ^ 

approved protective wireline distribution system. ^ 

(b) Specific measures will be implemented to ^ 

pf 0 vent remote programming of the ADPS via external 5 

telecommunications. 7_ 

(c) Procedures will be implemented to protect ^ 

against accidental spillage of the data base into ^ 

external telecommunications. 

(d) Procedures will be implemented for fault 11 

monitoring that will detect malfunctions and halt ^ 

processing when such malfunctions degrade any 1 3 

protective feature. ^ 

(e) Authentication procedures will be employed when 
telecommunications are used for ADPS-to-ADPS 
operations and/or ADPS-to-Remote user operations to n 
limit access to SIOP-ESI to those network terminals ^ 
and ADPS authorized to handle the data. 

h. Individual Security Responsibilities . All users of the ^ 
ADPS will be briefed on the need for exercising sound 2\ 
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security practices in protecting the information stored, 
processed, and produced by the system. Users will be 
informed when the system is operating in accordance with 
paragraph 2 above. Receipt of any information not specif- 
ically requested and of an unknown source shall be 
reported immediately to the ADPS Security Officer. 

i. Civilian Contractor ADP Maintenance personnel . These 
personnel will not be granted access to computer centers 
where data containing STOP-EST is resident in the ADPS 
unless the provisions of subparagraphs 8b(7) and 8b(8) of 
the Appendix have been met, 

j. Reports . When an inadvertent disclosure occurs 
involving an ADPS processing STOP-ESI , the report required 
in paragraph 16 of the Appendix shall be expanded to 
include at a minimum: 

(1) An abstract of the problem. 

(2) The type and source (e.g.. Annex F data from disc 
pack) of the data involved. 

(3) The ADP equipment involved. 

(4) The number of people inadvertently exposed to the 
data . 
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(5) An assessment of the risk of compromise of the 


1 


data . 

(6) Immediate action taken (e.g., system processing 
curtailed as authorized by subparagraph 5a above). 

(7) Steps being taken to preclude a recurrence of the 
problem . 

(8) Comments and recommendations regarding problems 
considered to be of concern to the SIOP community and 
not restricted to the reporting site. This information 
is essential in order to determine the disclosure risk 
level of SIOP-ESI throughout the SIOP community and to 
determine whether similar problems exist on a 
community-wide basis. Reports will be submitted on an 
"as-occurring" basis. 

k. Exceptions. Requests for exceptions to the security 
measures stated above will be submitted to the Director/ 
Joint Staff. 


2 

3 

4 

5 

6 

7 

8 
9 

10 

n 

il 

ii 

IL 

16 

17 

li 

20 . 

21 

22 


C-13 


Annex C 



1 


TAB TO ANNEX C 
SAFEGUARD STATEMENT 
♦♦SAFEGUARD** 

This ADP product was produced during a TOP SECRET SIOP- 
EST period. Handle as TOP SECRET SIOP-EST until this 
statement has been signed by an individual who is 
designated to determine that the security 
classification of this document is appropriately marked 
and that the document can assume the handling 
requirements for that classif ication. Report any 
unusual or unrequested output d iscrepancies immediately 
to: 

Printed/Typed Name 

Signature: , Date: 

ADPS Security Officer 

Room Number 

Phone Number 

This ADP product has been reviewed by the undersigned. The 
correct security classification of this document is 


Signature : 


Date : 
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Printed/Typed Name 

Room Number 

Phone Number 
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ANNEX D 

1 

DECLASSIFICATION PROCEDURES FOR ADP MEDIA-STORING ~ 

SIOP-EXTREMELY SENSITIVE INFORMATION (SIOP-ESI) (U) 2 

Safeguarding classified information in a 3 

computer or computer system requires special precautions 4 

because of the types of storage media and devices (magnetic 5 
drums, discs, disc packs, and tapes) used to store, record, 6 

or manipulate data that must be protected by appropriate 7 

classification and security controls until procedures in 6 

paragraph 2 below are carried out. 9 

2. Declass i f i cat ion . The eventual temporary or outright 10 

release of the storage device or a system including storage 11 

media should be anticipated. Procedures to be used in the 12 

event a decision is made to release or deploy the storage 13 

media are as follows: 14 

a- Magnetic Tapes . Tapes used to store magnetically 15 

recorded digital data may be degaussed and declassified by ^ 
erasing with approved tape degaussers that meet technical 17 

specifications promulgated by the Department of Defense. 1£ 

Magnetic Discs, Pics Packs, Drums, and Other Similar 19 

Rigid Magnetic Storage Devices (e.g.. Core Memory) . 20 

ii 

"All portions of this annex are UNCLASSIFIED" 22 
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TOP SECRET information, except that the state must be 
changed at least 999 times. 

(2) Plated Wire Memory. Plated wire memory used to 
continuously store classified information undisturbed 
more than 8 hours may not be declassified. Such media 
will continue to retain their classification until 
physically destroyed. If the classified information is 
stored less than 8 hours and unclassified data is later 
stored for at Least an equal time, the memory may be 
declassified according to the procedures for magnetic 
ferrite core memory. 

(3) Semiconductor Memory. Semiconductor memory may be 
declassified according to the procedures for magnetic 
ferrite core, except for volatile semiconductor memory. 
Volatile semiconductor memory may be declassified by 
setting "0" or "1“ in all memory locations. 

e . Magnetic Storage Media Used To Store Analog, Video^ or^ 

Similar Nondigital Information . Magnetic tape used to 
record analog, video, or similar types of nondigital 
information may be declassified by degaussing as in 
subparagraph 2a above. Tliere is no approved overwrite 
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method for declassifying rigid magnetic storage media used ^ 
for nondigital information; specific guidance may be 2 

obtained as stated in paragraph 5 below. In the case of a ^ 
failure of the tape degausser or in the absence of an ^ 

approved overwrite method for rigid surfaces# a magnet may ^ 

be used# as described in subparagraph 2c above. £ 

3. Disposition Approval . With the specific approval in each 7_ 

case of the designated (systems) approving authority (DAA) 8 

within the DOD component that is responsible for the security £ 

features of the ADPS# storage media treated as above may be 
handled as unclassified and released as necessary. 1_1 

4. Records, A record of the procedures used to declassify 
each storage media device shall be maintained for a period of 
2 years after disposition of the media or device. 

5 . Specific Guidance iS. 

a. Guidance for eradication of storage media not covered 

above may be obtained by submission of all pertinent L7 

details to the Director# Joint Staff, for consideration on 
a case-by-case basis. 12. 

b. In the absence of eradication by approved equipment or 2£ 
procedures or at the direction of the designated official 2_1 

22 
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responsible for the security features of the ADPS, 1 

ma»^netic information storage media will be safeguarded in 2 _ 

the manner prescribed for the highest classification ever 3 

recorded thereon until it is destroyed. ^ 
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ANNEX E 


SECURITY POLICY CONCERNING TRAVEL AND ASSIGNMENT 
OF PERSONNEL WITH ACCESS TO SI OP- EXTREMELY 
SENSITIVE INFORMATION (SIOP-ESI) (U) 


2. (U) Purpose . This policy is based upon the need to 
protect SIOP-ESI from possible compromise resulting from the 
capture, interrogat ion , exploitation, or entrapment of 
personnel who have or have had access to SIOP-ESI. 


CLASSIFIED BY DIRECTOR, J-3 
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3 , (U) Definitions 2 

a. (U) STOP-EST. STOP-ESt is defined in subparagraph 3 b 3 

of the Appendix. £ 

b. (u) Hazardous Activities . Hazardous activities include 5 

assignments or visits to and travel through countries 5 

listed in the Tab. Hazardous activities also include -7 

assignment or travel in combat zones or other areas where g 

hostilities are taking place, duty behind hostile lines, 9 

and duty or travel in isolated or exposed areas where 
individuals cannot reasonably be protected against hostile n 
action. ££ 

c. (U) Foreign Travel Briefings . These briefings alert 33 

traveling personnel to the potential for harassment, 34 

provocation, or entrapment by foreign intelligence ^5 

services in overseas areas and in other environments of an 
international nature, such as conferences, scientific and 
technical meetings, seminars, and symposiums. They ^ 

examine foreign intelligence service methods of operation ^ 
and suggest precautions designed to minimize the risk of ^ 

direct foreign intelligence exploitation of personnel 2£ 

during periods of temporary duty or leave. 22 


E -2 


Annex E 



1 

d . (U) Ant iter ror 1 st Briefings . These briefings advise 2^ 

personnel of a variety of measures that may be employed to 3 

safeguard oneself against terrorist threats in overseas ^ 

areas. 5 

4^ (U) Policy . personnel who have detailed knowledge and ^ 

continuing access to STOP-EST information at Service, joint ^ 

agency, or unified and specified command level may be subject g 
to travel and assignment restrictions, as determined by the g 

authority granting access. 

a. (U) Official Assignment/Travel 33 

( 1 ) (U) To the extent practicable, personnel with 

detailed knowledge and continuing access to SIOP-ESI 3^3 

should not be assigned to or directed to participate in 3^4 

hazardous activities. Regardless of the degree of 3^5 

access, all personnel who have access to STOP-EST must 3^g 

be appropriately briefed prior to part icipation in any 3^^ 

hazardous activity or visit as defined in subparagraph 33 

3 b above. ^ 

( 2 ) (U) Prior to official visits to or travel through 20 

the countries listed in the Tab, personnel who have 21 

access to STOP-EST must; 22 
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(a) (U) Give their supporting security office 2 

advance notice of such planned travel, 3 

(b) (U) Obtain foreign travel and antiter ror ist 4 

briefings before traveling to such countries. 5 

(c) (U) immediately contact the nearest US Consul 6 

Attache, or Embassy Regional Security Officer or 7 

post Duty Officer if detained or subjected to 8 

significant harassment or provocation while 9 

traveling, 10 

(d) (U) Report to the specified official upon 11 

return from travel any unusual incidents, including 12 
incidents of potential security concern, encountered 13 

during such travel. 14 

NOTE: Individuals who frequently travel, or attend or ^ 

host meetings of foreign visitors of the types 
described in subparagraphs 3 c above, need not be 16 

briefed for each such occasion, but shall be 
provided a thorough briefing at least once each 6- 17 

month period and a general reminder of their 
security responsibilities prior to each such 18 

activity. 

19 

b. (U) Unofficial Travel 20 

( 1 ) (U) Prior to unofficial visits to or travel through 2I 

the countries listed in the Tab, personnel who have 22 

access to SIOP-EST must take the actions outlined in 


E -4 


Annex E 



subparagraph 4a (2) above. — 

(2) (U) Access-granting authorities may d^ny unofficial 2 

travel by notifying the requester in writing of , the 1 

specific conditions upon which the denial is based. i 

c. (U) Actions Required of All Persons Travel ing to or 5 

T hrough Designated Countries (see Tab) . 

(1) (U) During official or unofficial visits to or 2. 

travel through the countries listed in the Tab, persons 8 

who have access to SIOP-ESI MUST immediately contact 2. 

the nearest US consular, attache, or Embassy official 12. 

if they have been detained or subjected to significant H 

12 

harassment or provocation while traveling. — 

(2) (U) Persons who have access to SIOP-ESI must be 11 

reminded annually of the foregoing obligations through H 

15 

security education programs. 

d. (U) Individuals With Previous Access . Persons whose 11 

access to SIOP-ESI is being terminated will be officially H 

reminded if their obligation to ensure continued 1— 

protection of SIOP-ESI and reminded of the risXs — 

associated with hazardous activities as defined herein. 11 

11 

5. (u) Responsibilities 
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a. (U) The Directorate for Information and Resource — 

2 

Management, OJCS, will prepare and disseminate to the - 

holders of this document an updated list of countries — 

4 

(Tab) identified as posing a security risk bearing on this — 
policy as changes occur. — 

b. (U) Access-grant i ng autliorities will issue implementing - 

directives concerning travel and assignment of personnel — 

8 

under their cognizance. — 
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TAB TO ANNEX E 


1 


COUNTRIES AND AREAS IN 
ARE CONSIDERED 


WHICH VISITS, TRAVEL, AND ASSIGNMENT £ 

TO BE A HAZARDOUS ACTIVITY (U) 

^ I 

■ 5 
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